CVE-2023-3247

score

<0.1

cvss

2.6

epss

0.7%

published

2023-07-22

kev added

—

first seen

2026-10-21

PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 contain a information disclosure caused by unchecked random value generator failure in SOAP HTTP Digest Authentication, letting attackers potentially access uninitialized memory and guess client nonces, exploit requires using affected PHP versions with SOAP HTTP Digest Authentication enabled.