CVE-2022-31631

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-31631
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31631.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-31631
Aliases
Downstream
Related
Published
2025-02-12T22:15:29.007Z
Modified
2026-03-14T11:45:04.080130Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

In PHP versions 8.0.* before 8.0.27, 8.1.* before 8.1.15, 8.2.* before 8.2.2 when using PDO::quote() function to quote user-supplied data for SQLite, supplying an overly long string may cause the driver to incorrectly quote the data, which may further lead to SQL injection vulnerabilities.

References

Affected packages

Git / github.com/php/php-src

Affected ranges

Type
GIT
Repo
https://github.com/php/php-src
Events
Introduced
5dc92c2117cafc61daaaaa240fd46c3ac33872a4
Fixed
f325ad215d0c9d1cc5cc533ca0819b0d57fe42a3
Introduced
381ba9f5d0edd0c9c8ec1dea7e21d513ad08b115
Fixed
010300fb6bcd7c8e755cb63f9af159927b7831e8
Introduced
70ee6c20ad97e02c2b8098aeea96fefbbc3ac5c2
Fixed
b20c0e925fe401a44a99b0d34b438797be865bb0
Database specific 
{
    "versions": [
        {
            "introduced": "8.0.0"
        },
        {
            "fixed": "8.0.27"
        },
        {
            "introduced": "8.1.0"
        },
        {
            "fixed": "8.1.15"
        },
        {
            "introduced": "8.2.0"
        },
        {
            "fixed": "8.2.2"
        }
    ]
}

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31631.json"