Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2018-6334

Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used this can lead to unexp

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
facebook

Description

Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used this can lead to unexpected behavior. This affects all supported versions of HHVM prior to the patch (3.25.1, 3.24.5, and 3.21.9 and below).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Facebook HHVM

  • 3.25.2affected
  • 3.25.0affected
  • 3.24.6affected
  • 3.22.0affected
  • 3.21.10affected
  • unspecified to < 3.21.10affected

References