SECURELYN
Free ScanFree consultation

PHP (CVE-2024-4577)

CVE-2024-4577 is a published vulnerability record for PHP. This draft does not describe the flaw yet. A Securelyn engineer adds the verified description, affected versions and fixed release from the vendor and NVD pages before the advisory goes live.

Check if you are exposedTalk to an expert

Automated summary, not yet reviewed by a Securelyn engineer

Who should care

Anyone who runs PHP on a website, server or network they are responsible for, and anyone who pays a provider to run it for them. Our exposure check can recognise PHP from public signals on a website, so you can use it to find out.

What to do

  1. Find out whether you run PHP, and which version. Ask your web developer or hosting provider if you are not sure.
  2. Read the vendor's advisory for CVE-2024-4577 and note the fixed release. The NVD record under References links to the vendor's page.
  3. Update to the fixed release or a later one. If you cannot update now, ask your provider which workarounds the vendor documents.
  4. Check the CISA catalogue under References to see whether CVE-2024-4577 is listed as exploited. If it is, treat the update as urgent.
  5. Run the exposure check on this page again once you have updated.

What is affected

Affected versions are not recorded in our offline sample. Read the vendor's advisory for CVE-2024-4577 to see which PHP versions are affected and which release fixes them.

Is it being exploited?

CISA KEV
Not in our offline sample: check the CISA catalogue.
EPSS
Not in our offline sample: check the CISA catalogue.

References