UpHeron
All vulnerabilities

Servers and applications

CVE-2019-11048

In PHP versions 7.2.x below 7.2.31, 7.3.x below 7.3.18 and 7.4.x below 7.4.6, when HTTP file uploads are allowed, supplying overly long filenames or field names could lead PHP engine to try to allocate oversized memory storage, hit the memory limit and stop processing the request, without cleaning up temporary files created by upload request. This potentially could lead to accumulation of…

Severity
Medium 5.3
Published
20 May 2020
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Fixed in
7.2.31, 7.3.18, 7.4.6
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • From 7.2.0 before 7.2.31
  • From 7.3.0 before 7.3.18
  • From 7.4.0 before 7.4.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-11048
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-11048