CVE-2021-37704

Packagist/phpfastcache/phpfastcache CVE-2021-37704: medium 5.4, EPSS 5.89%

Exposed phpinfo() leadked via documentation files

Action: Upgrade phpfastcache/phpfastcache to 6.1.5 or later.

composer require phpfastcache/phpfastcache:6.1.5

composer require phpfastcache/phpfastcache:7.1.2

composer require phpfastcache/phpfastcache:8.0.7

Affected

Fixed versions

Sources

• osv: GHSA-cvh5-p6r6-g2qc
• https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-cvh5-p6r6-g2qc
• https://nvd.nist.gov/vuln/detail/CVE-2021-37704
• https://github.com/flextype/flextype/issues/567
• https://github.com/PHPSocialNetwork/phpfastcache/pull/813
• https://github.com/PHPSocialNetwork/phpfastcache/pull/814
• https://github.com/PHPSocialNetwork/phpfastcache/pull/815
• https://github.com/PHPSocialNetwork/phpfastcache/commit/41a77d0d8f126dbd6fbedcd9e6a82e86cdaafa51
• https://github.com/PHPSocialNetwork/phpfastcache/blob/master/CHANGELOG.md#807
• https://packagist.org/packages/phpfastcache/phpfastcache

CVE-2021-37704 · published 2021-08-30T16:13:40Z · modified 2026-09-10T03:49:07.936253980Z · JSON