Vulnerability Description
In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename contains URL-encoded NUL character, this may cause the function to interpret this as the end of the filename, thus interpreting the filename differently from what the user intended, which may lead it to reading a different file than intended.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Php | Php | >= 7.3.0, < 7.3.33 |
| Netapp | Clustered Data Ontap | - |
| Debian | Debian Linux | 10.0 |
| Tenable | Tenable.Sc | < 5.21.0 |
Related Weaknesses (CWE)
References
- https://bugs.php.net/bug.php?id=79971ExploitIssue TrackingPatch
- https://lists.debian.org/debian-lts-announce/2022/12/msg00030.htmlIssue TrackingMailing List
- https://security.netapp.com/advisory/ntap-20211223-0005/Third Party Advisory
- https://www.debian.org/security/2022/dsa-5082Third Party Advisory
- https://www.tenable.com/security/tns-2022-09PatchRelease NotesThird Party Advisory
- https://bugs.php.net/bug.php?id=79971ExploitIssue TrackingPatch
- https://lists.debian.org/debian-lts-announce/2022/12/msg00030.htmlIssue TrackingMailing List
- https://security.netapp.com/advisory/ntap-20211223-0005/Third Party Advisory
- https://www.debian.org/security/2022/dsa-5082Third Party Advisory
- https://www.tenable.com/security/tns-2022-09PatchRelease NotesThird Party Advisory
FAQ
What is CVE-2021-21707?
CVE-2021-21707 is a vulnerability with a CVSS score of 5.3 (MEDIUM). In PHP versions 7.3.x below 7.3.33, 7.4.x below 7.4.26 and 8.0.x below 8.0.13, certain XML parsing functions, like simplexml_load_file(), URL-decode the filename passed to them. If that filename conta...
How severe is CVE-2021-21707?
CVE-2021-21707 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-21707?
Check the references section above for vendor advisories and patch information. Affected products include: Php Php, Netapp Clustered Data Ontap, Debian Debian Linux, Tenable Tenable.Sc.