Vulnerability CVE-2022-31628


Published: 2022-09-28   Modified: 2022-09-29

Description:
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the phar uncompressor code would recursively uncompress "quines" gzip files, resulting in an infinite loop.

 References:
https://bugs.php.net/bug.php?id=81726

Copyright 2026, cxsecurity.com

 

Back to Top