Skip to main content

Getcomposer

5 CVEs vendor

Monthly

CVE-2023-43655 Sep 29, 20:15 PHP HIGH PATCH This Week

Composer is a dependency manager for PHP. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

PHP RCE Debian Debian Linux Fedora +3
NVD GitHub
CVSS 3.1
8.8
EPSS
1.4%
CVE-2022-24828 Apr 13, 21:15 PHP HIGH PATCH This Week

Composer is a dependency manager for the PHP programming language. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP RCE Fedora Composer Tenable Sc +3
NVD GitHub
CVSS 3.1
8.8
EPSS
1.9%
CVE-2021-41116 Oct 05, 18:15 PHP CRITICAL PATCH Act Now

Composer is an open source dependency manager for the PHP language. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Command Injection vulnerability could allow attackers to inject arbitrary commands into system command execution.

PHP Command Injection Microsoft Composer Tenable Sc +2
NVD GitHub
CVSS 3.1
9.8
EPSS
2.9%
CVE-2021-29472 Apr 27, 21:15 PHP HIGH POC PATCH This Week

Composer is a dependency manager for PHP. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Debian Debian Linux Fedora Composer +2
NVD GitHub
CVSS 3.1
8.8
EPSS
4.8%
CVE-2020-15145 Aug 14, 17:15 HIGH PATCH This Week

In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. This Incorrect Default Permissions vulnerability could allow attackers to access resources due to overly permissive default settings.

Privilege Escalation Microsoft Composer Setup Getcomposer
NVD GitHub
CVSS 3.1
8.2
EPSS
0.4%
EPSS 1% CVSS 8.8
HIGH PATCH This Week

Composer is a dependency manager for PHP. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

PHP RCE Debian +5
NVD GitHub
EPSS 2% CVSS 8.8
HIGH PATCH This Week

Composer is a dependency manager for the PHP programming language. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

PHP RCE Fedora +5
NVD GitHub
EPSS 3% CVSS 9.8
CRITICAL PATCH Act Now

Composer is an open source dependency manager for the PHP language. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Command Injection vulnerability could allow attackers to inject arbitrary commands into system command execution.

PHP Command Injection Microsoft +4
NVD GitHub
EPSS 5% CVSS 8.8
HIGH POC PATCH This Week

Composer is a dependency manager for PHP. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

RCE Debian Debian Linux +4
NVD GitHub
EPSS 0% CVSS 8.2
HIGH PATCH This Week

In Composer-Setup for Windows before version 6.0.0, if the developer's computer is shared with other users, a local attacker may be able to exploit the following scenarios. Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. This Incorrect Default Permissions vulnerability could allow attackers to access resources due to overly permissive default settings.

Privilege Escalation Microsoft Composer Setup +1
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy