CVE - CVE-2021-37704

CVE-ID
CVE-2021-37704	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
PhpFastCache is a high-performance backend cache system (packagist package phpfastcache/phpfastcache). In versions before 6.1.5, 7.1.2, and 8.0.7 the `phpinfo()` can be exposed if the `/vendor` is not protected from public access. This is a rare situation today since the vendor directory is often located outside the web directory or protected via server rule (.htaccess, etc). Only the v6, v7 and v8 will be patched respectively in 8.0.7, 7.1.2, 6.1.5. Older versions such as v5, v4 are not longer supported and will NOT be patched. As a workaround, protect the `/vendor` directory from public access.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
CONFIRM:https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-cvh5-p6r6-g2qc URL:https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-cvh5-p6r6-g2qc MISC:https://github.com/PHPSocialNetwork/phpfastcache/blob/master/CHANGELOG.md#807 URL:https://github.com/PHPSocialNetwork/phpfastcache/blob/master/CHANGELOG.md#807 MISC:https://github.com/PHPSocialNetwork/phpfastcache/commit/41a77d0d8f126dbd6fbedcd9e6a82e86cdaafa51 URL:https://github.com/PHPSocialNetwork/phpfastcache/commit/41a77d0d8f126dbd6fbedcd9e6a82e86cdaafa51 MISC:https://github.com/PHPSocialNetwork/phpfastcache/pull/813 URL:https://github.com/PHPSocialNetwork/phpfastcache/pull/813 MISC:https://github.com/PHPSocialNetwork/phpfastcache/pull/814 URL:https://github.com/PHPSocialNetwork/phpfastcache/pull/814 MISC:https://github.com/PHPSocialNetwork/phpfastcache/pull/815 URL:https://github.com/PHPSocialNetwork/phpfastcache/pull/815 MISC:https://github.com/flextype/flextype/issues/567 URL:https://github.com/flextype/flextype/issues/567 MISC:https://packagist.org/packages/phpfastcache/phpfastcache URL:https://packagist.org/packages/phpfastcache/phpfastcache
Assigning CNA
GitHub (maintainer security advisories)
Date Record Created
20210729	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20210729)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)