swoole records

4 published records for vendor swoole.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-43676No exploit	matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.swoole · swoole php framework · CWE-22 Pre-auth Path traversal	Critical9.8	—	1.4%	Dec 3, 2021
31Monitor	CVE-2018-15503No exploit	The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process.swoole · swoole · CWE-502 Pre-auth Deserialization Denial of service	High7.5	—	2.2%	Aug 17, 2018
26Monitor	CVE-2020-24275No exploit	A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL.swoole · swoole · CWE-74 pre-auth RCE	Medium6.5	—	0.7%	Jul 20, 2023
22Monitor	CVE-2019-15518No exploit	Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.swoole · swoole · CWE-22 Pre-auth Path traversal	Medium5.3	—	2.0%	Aug 23, 2019

CVE-2021-43676
39Monitor
matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Path traversal
swoole · swoole php frameworkDec 3, 2021
CVE-2018-15503
31Monitor
The unpack implementation in Swoole version 4.0.4 lacks correct size checks in the deserialization process.
HighCVSS 7.5No exploitEPSS 2%
swoole · swooleAug 17, 2018
CVE-2020-24275
26Monitor
A HTTP response header injection vulnerability in Swoole v4.5.2 allows attackers to execute arbitrary code via supplying a crafted URL.
MediumCVSS 6.5No exploitEPSS 0%
- pre-auth RCE
swoole · swooleJul 20, 2023
CVE-2019-15518
22Monitor
Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.
MediumCVSS 5.3No exploitEPSS 2%
- Pre-auth
- Path traversal
swoole · swooleAug 23, 2019