CVE-2023-3823

score

<0.1

cvss

8.6

epss

1.6%

published

2023-08-11

kev added

—

first seen

2026-10-21

PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 contain a vulnerability caused by reliance on global libxml state for configuration, which can be altered by other modules like ImageMagick, leading to external entity loading and potential local file disclosure, exploit requires shared process environment.