CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. Its EPSS score suggests a 49.3% probability of exploitation in the next 30 days.
CVE
CVE-2022-31629
Severity
MEDIUM
CVSS
6.5
EPSS
49.34%
Original NVD Description
In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.
Related CVEs
Other vulnerabilities affecting the same vendor(s)