CVE-2021-37704

PhpFastCache is a high-performance backend cache system (packagist package phpfastcache/phpfastcache). In versions before 6.1.5, 7.1.2, and 8.0.7 the `phpinfo()` can be exposed if the `/vendor` is not protected from public access. This is a rare situation today since the vendor directory is often located outside the web directory or protected via server rule (.htaccess, etc). Only the v6, v7 and v8 will be patched respectively in 8.0.7, 7.1.2, 6.1.5. Older versions such as v5, v4 are not longer supported and will **NOT** be patched. As a workaround, protect the `/vendor` directory from public access.

• CWE-200
• CWE-668

• https://github.com/PHPSocialNetwork/phpfastcache/blob/master/CHANGELOG.md#807Release Notes, Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/commit/41a77d0d8f126dbd6fbedcd9e6a82e86cdaafa51Patch, Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/pull/813Patch, Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/pull/814Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/pull/815Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-cvh5-p6r6-g2qcThird Party Advisory
• https://github.com/flextype/flextype/issues/567Exploit, Issue Tracking, Third Party Advisory
• https://packagist.org/packages/phpfastcache/phpfastcacheProduct, Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/blob/master/CHANGELOG.md#807Release Notes, Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/commit/41a77d0d8f126dbd6fbedcd9e6a82e86cdaafa51Patch, Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/pull/813Patch, Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/pull/814Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/pull/815Third Party Advisory
• https://github.com/PHPSocialNetwork/phpfastcache/security/advisories/GHSA-cvh5-p6r6-g2qcThird Party Advisory
• https://github.com/flextype/flextype/issues/567Exploit, Issue Tracking, Third Party Advisory
• https://packagist.org/packages/phpfastcache/phpfastcacheProduct, Third Party Advisory

Published

Aug 12, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-37699Next.js is an open source website development framework to b…6.1
• CVE-2021-3770vim is vulnerable to Heap-based Buffer Overflow7.8
• CVE-2021-37700@github/paste-markdown is an npm package for pasting markdow…6.1
• CVE-2021-37701The npm package "tar" (aka node-tar) before versions 4.4.16,…8.6
• CVE-2021-37702Pimcore is an open source data & experience management platf…8.8
• CVE-2021-37703Discourse is an open-source platform for community discussio…4.3
• CVE-2021-37705OneFuzz is an open source self-hosted Fuzzing-As-A-Service p…10
• CVE-2021-37706PJSIP is a free and open source multimedia communication lib…9.8
• CVE-2021-37707Shopware is an open source eCommerce platform. Versions prio…7.5
• CVE-2021-37708Shopware is an open source eCommerce platform. Versions prio…9.8
• CVE-2021-37709Shopware is an open source eCommerce platform. Versions prio…6.5
• CVE-2021-3771Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…