CVE-2024-4577 | PHP up to 8.1.28/8.2.19/8.3.7 on Windows Unicode Character argument injection

A vulnerability has been found in PHP up to 8.1.28/8.2.19/8.3.7 on Windows and classified as critical. Affected by this vulnerability is an unknown functionality of the component Unicode Character Handler. The manipulation leads to argument injection.

This vulnerability is known as CVE-2024-4577. The attack can be launched remotely. Furthermore, there is an exploit available.

It is recommended to upgrade the affected component.