CVE-2021-37704

Katalog CVE

CVSS 4.3 · Medium EPSS 6,1%

Kerentanan Exposure of Sensitive Information to an Unauthorized Actor pada phpfastcache. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

PhpFastCache is a high-performance backend cache system (packagist package phpfastcache/phpfastcache). In versions before 6.1.5, 7.1.2, and 8.0.7 the `phpinfo()` can be exposed if the `/vendor` is not protected from public access. This is a rare situation today since the vendor directory is often located outside the web directory or protected via server rule (.htaccess, etc). Only the v6, v7 and v8 will be patched respectively in 8.0.7, 7.1.2, 6.1.5. Older versions such as v5, v4 are not longer supported and will **NOT** be patched. As a workaround, protect the `/vendor` directory from public access.

Rincian

Terbit di NVD

12 Agustus 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-668: Exposure of Resource to Wrong Sphere

EPSS (30 hari)

6,1% peluang dieksploitasi; lebih tinggi dari 93,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/PHPSocialNetwork/phpfastcache/commit/41a77d0d8f126dbd6fbedcd9e6a82e86cdaafa51 patch · advisory pihak ketiga
• https://github.com/PHPSocialNetwork/phpfastcache/pull/813 patch · advisory pihak ketiga
• https://github.com/PHPSocialNetwork/phpfastcache/blob/master/CHANGELOG.md#807 release notes · advisory pihak ketiga
• https://github.com/PHPSocialNetwork/phpfastcache/pull/814 advisory pihak ketiga
• https://github.com/PHPSocialNetwork/phpfastcache/pull/815 advisory pihak ketiga
• https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-cvh5-p6r6-g2qc advisory pihak ketiga
• https://github.com/flextype/flextype/issues/567 exploit · issue tracking · advisory pihak ketiga
• https://packagist.org/packages/phpfastcache/phpfastcache product · advisory pihak ketiga