Description
Cross-site scripting (XSS) vulnerability in apc.php in the Alternative PHP Cache (APC) extension before 3.1.4 for PHP allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | php-pecl-apc +1 | 3.1.9-2.el6 | RHSA-2012:0811 |
Advisories 1
- RHSA-2012:0811 Red Hat Security Advisory: php-pecl-apc security, bug fix, and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- http://pecl.php.net/package-changelog.php?package=APC&release=3.1.4
- ADV-2010-2406 vdb-entry
- [oss-security] 20100914 Re: CVE request: xss in pecl-apc before 3.1.4 mailing-list
- RHSA-2012:0811 vendor-advisory
- [oss-security] 20100914 CVE request: xss in pecl-apc before 3.1.4 mailing-list
- [oss-security] 20100914 Re: CVE request: xss in pecl-apc before 3.1.4 mailing-list