• caglararli@hotmail.com
  • 05386281520

CVE-2023-52892 | phpseclib up to 1.0.21/2.0.45/3.0.32 x.509 Certificate Subject Alternative Name incorrect regex (Issue 1943)

Çağlar Arlı      -    45 Views

CVE-2023-52892 | phpseclib up to 1.0.21/2.0.45/3.0.32 x.509 Certificate Subject Alternative Name incorrect regex (Issue 1943)

A vulnerability classified as problematic has been found in phpseclib up to 1.0.21/2.0.45/3.0.32. Affected is an unknown function of the component x.509 Certificate Handler. The manipulation of the argument Subject Alternative Name leads to incorrect regular expression. This vulnerability is traded as CVE-2023-52892. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.