CVE:CVE-2022-31629
CNNVD:CNNVD-202209-2922
PHP是一种在服务器端执行的脚本语言。
PHP 7.4.31之前版本、8.0.24之前版本和8.1.11之前版本存在安全漏洞，攻击者利用该漏洞可以能够在受害者的浏览器中设置一个标准的不安全 cookie。
solution:Upgrade php php to a higher version than 7.4.31,8.0.24,8.1.11,and avoid the version (,7.4.31),[8.0.0,8.0.24),[8.1.0,8.1.11); Upgrade fedoraproject fedora to a higher version than 35,36,37,and avoid the version 35,36,37; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0