Php Microagent
1 CVEs
product
Monthly
Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
Code Injection
Jwt Attack
Php Microagent
NVD
CVSS 3.1
7.3
EPSS
1.2%
EPSS 1%
CVSS 7.3
HIGH
POC
This Week
Lack of cryptographic signature verification in the Sqreen PHP agent daemon before 1.16.0 makes it easier for remote attackers to inject rules for execution inside the virtual machine. Rated high severity (CVSS 7.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
PHP
Code Injection
Jwt Attack
+1
NVD