CVE:CVE-2021-21707
CNNVD:CNNVD-202111-1606
PHP是一种在服务器端执行的脚本语言。
PHP 存在安全漏洞，攻击者可以通过 Xml 函数空字符绕过 PHP 的访问限制，以读取或更改文件。
solution:Upgrade php php to a higher version than 7.3.33,7.4.26,8.0.13,and avoid the version [7.3.0,7.3.33),[7.4.0,7.4.26),[8.0.0,8.0.13); Upgrade netapp clustered_data_ontap to a higher version than -; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0; Upgrade tenable tenable.sc to a higher version than 5.21.0,and avoid the version (,5.21.0)