{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "PHP-CGI argument injection on Windows (CVE-2024-4577) · updates",
  "home_page_url": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577",
  "feed_url": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577/feed.json",
  "description": "A bypass of the old CVE-2012-1823 fix: on Windows, PHP's 'Best-Fit' character mapping let attackers inject arguments into PHP running in CGI mode (including default XAMPP setups) and execute code remotely. Found by Orange Tsai (DEVCORE) and fixed in PHP 8.3.8, 8.2.20 and 8.1.29. Exploitation, including by ransomware operators, followed within days. Added to the CISA KEV catalog on 2024-06-12. CISA lists known use in ransomware campaigns.",
  "language": "en",
  "_pwn": {
    "slug": "php-cgi-argument-injection-cve-2024-4577",
    "severity": "critical",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577/feed.xml",
    "llms": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577/llms.txt",
    "json": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-12-d210281c",
      "url": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-12-d210281c",
      "title": "PHP-CGI argument injection on Windows (CVE-2024-4577): CISA added CVE-2024-4577 to the KEV catalog (federal deadline 2024-07-03)",
      "content_text": "PHP-CGI argument injection on Windows (CVE-2024-4577): CISA added CVE-2024-4577 to the KEV catalog (federal deadline 2024-07-03)\n\nSource: https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "date_published": "2024-06-12T00:00:00.000Z",
      "external_url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-09-9d811e89",
      "url": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-09-9d811e89",
      "title": "PHP-CGI argument injection on Windows (CVE-2024-4577): CVE-2024-4577 published",
      "content_text": "PHP-CGI argument injection on Windows (CVE-2024-4577): CVE-2024-4577 published\n\nSource: https://nvd.nist.gov/vuln/detail/CVE-2024-4577",
      "date_published": "2024-06-09T00:00:00.000Z",
      "external_url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4577",
      "tags": [
        "critical"
      ]
    },
    {
      "id": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-06-2402274f",
      "url": "https://pwn.watch/i/php-cgi-argument-injection-cve-2024-4577#2024-06-06-2402274f",
      "title": "PHP-CGI argument injection on Windows (CVE-2024-4577): DEVCORE discloses CVE-2024-4577; fixed PHP releases available",
      "content_text": "PHP-CGI argument injection on Windows (CVE-2024-4577): DEVCORE discloses CVE-2024-4577; fixed PHP releases available\n\nSource: https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/",
      "date_published": "2024-06-06T00:00:00.000Z",
      "external_url": "https://devco.re/blog/2024/06/06/security-alert-cve-2024-4577-php-cgi-argument-injection-vulnerability-en/",
      "tags": [
        "critical"
      ]
    }
  ]
}