CVE:CVE-2021-21705
CNNVD:CNNVD-202107-026
PHP是一种在服务器端执行的脚本语言。
PHP 存在输入验证错误漏洞，攻击者可利用该漏洞通过PHP的 FILTER_VALIDATE_URL 欺骗用户，以便将其重定向到恶意站点。
solution:Upgrade php php to a higher version than 7.3.29,7.4.21,8.0.8,and avoid the version [7.3.0,7.3.29),[7.4.0,7.4.21),[8.0.0,8.0.8); Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade oracle sd-wan_aware to a higher version than 8.2,and avoid the version 8.2