title: DirectoryIterator class silently truncates after a null byte
description: In PHP versions 7.2.x below 7.2.26, 7.3.x below 7.3.13 and 7.4.0, PHP DirectoryIterator class accepts filenames with embedded \0 byte and treats them as terminating at that byte. This could lead to security vulnerabilities, e.g. in applications checking paths that the code is allowed to access.
problem types: CWE-170 Improper Null Termination
affected:
{
product: PHP
vendor: PHP Group
versions:
lessThan: 7.2.26, status: affected, version: 7.2.x, versionType: custom
lessThan: 7.3.13, status: affected, version: 7.3.x, versionType: custom
lessThan: 7.4.1, status: affected, version: 7.4.x, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.7
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
version: 3.1
]