CVE-2023-0662

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload can cause high resource consumption and excessive number of log entries. This can cause denial of service on the affected server by exhausting CPU resources or disk space.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

Vendor	Product	Versions
PHP Group	PHP	>= 8.0.x, < 8.0.28; >= 8.1.x, < 8.1.16; >= 8.2.x, < 8.2.3

References

Timeline

Published: Feb 16, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-06639.8A vulnerability was found in Calendar Event Management System 2.3.0. It has been rated as critical. This issue affects some unknown processi CVE-2023-06647.8A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Win CVE-2023-06656.5HashiCorp Vault's PKI mount issuer endpoints did not correctly authorize access to remove an issuer or modify issuer metadata, potentially r CVE-2023-06666.5Due to failure in validating the length provided by an attacker-crafted RTPS packet, Wireshark version 4.0.5 and prior, by default, is susce CVE-2023-06676.5Due to failure in validating the length provided by an attacker-crafted MSMMS packet, Wireshark version 4.0.5 and prior, in an unusual confi CVE-2023-06686.5Due to failure in validating the length provided by an attacker-crafted IEEE-C37.118 packet, Wireshark version 4.0.5 and prior, by default, CVE-2023-06697.2Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Serv CVE-2023-06707.2Ulearn version a5a7ca20de859051ea0470542844980a66dfc05d allows an attacker with administrator permissions to obtain remote code execution on CVE-2023-06718.8Code Injection in GitHub repository froxlor/froxlor prior to 2.0.10.CVE-2023-06738.1A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. Affected by this vulnerability is an unknown fun CVE-2023-06746.5A vulnerability, which was classified as problematic, has been found in XXL-JOB 2.3.1. Affected by this issue is some unknown functionality CVE-2023-06758.8A vulnerability, which was classified as critical, was found in Calendar Event Management System 2.3.0. This affects an unknown part. The ma