CVE-2023-0662

HIGH 7.5CVE-2023-0662 · Published 16/02/2023 · updated 17/06/2026

In short

CVE-2023-0662 is a HIGH (CVSS 7.5) vulnerability affecting php (php).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 73.7% of all vulnerabilities.
Fix: update to 8.0.28, 8.1.16, 8.2.3 or later.

Package	Affected versions	Patched versions
php php	`≥ 8.0.0, < 8.0.28≥ 8.1.0, < 8.1.16≥ 8.2.0, < 8.2.3`	`8.0.288.1.168.2.3`

Description

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

References

php/php-src security advisory · Third Party Advisory
security.netapp.com/advisory/ntap-20230517-0001

More vulnerabilities in php

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

php

≥ 8.0.0, < 8.0.28≥ 8.1.0, < 8.1.16≥ 8.2.0, < 8.2.3

8.0.288.1.168.2.3

More vulnerabilities in php

See all →