CVE-2022-31629

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

In PHP versions before 7.4.31, 8.0.24 and 8.1.11, the vulnerability enables network and same-site attackers to set a standard insecure cookie in the victim's browser which is treated as a `__Host-` or `__Secure-` cookie by PHP applications.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20CWE-1284

Affected software

No affected versions have been published.

Timeline

Published
Sep 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-316307.1In PHP versions prior to 7.4.33, 8.0.25 and 8.1.12, when using imageloadfont() function in gd extension, it is possible to supply a speciallCVE-2022-316319.1In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data foCVE-2022-316357.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316367.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316377.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316387.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316397.8Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allCVE-2022-316407.0Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316417.0Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316427.0Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escCVE-2022-316435.5A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP iCVE-2022-316447.8Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, esc
CVE-2022-31629: Medium severity, CVSS 6.5 | Vulnix