CVE-2019-11045

LOW · CVSS 3.7 EPSS 8.82%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-11045

Severity

LOW

CVSS

3.7

EPSS

8.82%

Original NVD Description

In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.