Reflected cross-site scripting in PHP - CVE-2018-5712

Vulnerability identifier: #VU10389

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2018-5712

CWE-ID: CWE-79

Exploitation vector: Remote access

Exploit availability: No public exploit available

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists on the PHAR 404 error page due to insufficient sanitization of user-supplied data. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

PHP
Amazon Linux AMI
Debian Linux
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Power
SUSE Linux
Slackware Linux
Fedora
php (Red Hat package)
php5 (Ubuntu package)
php5 (Alpine package)
php7 (Alpine package)
php7.0 (Ubuntu package)
php7.1 (Ubuntu package)
php
Oracle Secure Backup

Update to version 7.2.5.

php (Red Hat package) - update to 5.4.16-48.el7
php5 (Ubuntu package) - addressed in versions 5.5.9+dfsg-1ubuntu4.23, 5.5.9+dfsg-1ubuntu4.24
php5 (Alpine package) - update to 5.6.33-r0
php7 (Alpine package) - update to 7.0.27-r0
php7.0 (Ubuntu package) - update to 7.0.28-0ubuntu0.16.04.1
php7.1 (Ubuntu package) - update to 7.1.15-0ubuntu0.17.10.1
Oracle Secure Backup - update to 18.1.0.0
php - addressed in versions 7.1.17-1.fc26, 7.1.17-1.fc27, 7.2.5-1.fc28

• https://bugs.php.net/bug.php?id=74782

• Slackware Linux update for php
• Multiple vulnerabilities in PHP
• Amazon Linux AMI update for php56, php70, php71
• Ubuntu update for PHP
• SUSE Linux update for php53
• Amazon Linux AMI update for php56, php70, php71
• Slackware Linux update for php
• Red Hat update for php
• Debian update for php7.0
• Ubuntu update for PHP
• Red Hat Enterprise Linux 7 update for php
• Reflected cross-site scripting in Oracle Secure Backup
• Reflected cross-site scripting in php5 (Alpine package)
• Reflected cross-site scripting in php7 (Alpine package)
• Fedora 28 update for php
• Fedora 27 update for php
• Fedora 26 update for php