cve 2024 11236 uncontrolled long string inputs to the ldap_escape()

[Pinuccio]

What is this thing? Can you help me?

 

[Splicho]

php vulnaribility

https://nvd.nist.gov/vuln/detail/CVE-2024-11236
https://github.com/php/php-src/security/advisories/GHSA-5hqh-c84r-qjcv

 

[Pinuccio]

php vulnaribility

https://nvd.nist.gov/vuln/detail/CVE-2024-11236
https://github.com/php/php-src/security/advisories/GHSA-5hqh-c84r-qjcv

SplichoI use namecheap php 8.3 why do I get this vulnerability?

 

[Pinuccio]

php vulnaribility

https://nvd.nist.gov/vuln/detail/CVE-2024-11236
https://github.com/php/php-src/security/advisories/GHSA-5hqh-c84r-qjcv

SplichoWho should I contact at namecheap or is it a vulnerability in xenforo 2.3.4? I don't understand

 

[Splicho]

Who should I contact at namecheap or is it a vulnerability in xenforo 2.3.4? I don't understand

PinuccioIt's a vulnerability in PHP itself, there's nothing much you can do about it than waiting for it to be fixed by the PHP devs.

Either way I wouldn't bother. It seems like it is not directly affecting XenForo as a whole.

 

[Pinuccio]

It's a vulnerability in PHP itself, there's nothing much you can do about it than waiting for it to be fixed by the PHP devs.

Either way I wouldn't bother. It seems like it is not directly affecting XenForo as a whole.

SplichoOkay thanks Okay thanks Okay thanks