Approved changes feed: RSS · Atom
cpe:2.3:a:php_group:php:8.0.0:*:*:*:*:*:*:*
part: a version: 8.0.0 update: *
| Vendor | Php Group (92a56395-c1b3-5edb-8b1f-05390af3a68e) |
|---|---|
| Product | Php (35c209c6-ba98-5de5-8cfd-39b8dfcb2e71) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-0567 |
vulnerable | 2026-06-08 05:52:31.934631 |
password_verify() always returns true for some invalid hashes
HIGH (7.7)
In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, password_verify() function may accept some invalid Blowfish hashes as valid. If such invalid hash ever ends up in the password database, it may lead to an application allowing any password for this entry as valid.
Published: 2023-02-16T06:15:50.127Z
Updated: 2026-07-19T18:24:30.482Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.