CVE-2024-5585

In PHP versions 8.1.* before 8.1.29, 8.2.* before 8.2.20, 8.3.* before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailing spaces. Original issue: when using proc_open() command with array syntax, due to insufficient escaping, if the arguments of the executed command are controlled by a malicious user, the user can supply arguments that would execute arbitrary commands in Windows shell.

• CWE-78
• CWE-116
• CWE-116

• http://www.openwall.com/lists/oss-security/2024/06/07/1Mailing List, Third Party Advisory
• https://github.com/php/php-src/security/advisories/GHSA-9fcc-425m-g385Exploit, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/
• https://security.netapp.com/advisory/ntap-20240726-0002/
• http://www.openwall.com/lists/oss-security/2024/06/07/1Mailing List, Third Party Advisory
• https://github.com/php/php-src/security/advisories/GHSA-9fcc-425m-g385Exploit, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PKGTQUOA2NTZ3RXN22CSAUJPIRUYRB4B/Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W45DBOH56NQDRTOM2DN2LNA2FZIMC3PK/
• https://security.netapp.com/advisory/ntap-20240726-0002/
• https://www.vicarius.io/vsociety/posts/command-injection-vulnerability-in-php-on-windows-systems-cve-2024-1874-and-cve-2024-5585

Published

Jun 9, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-5579Allegra renderFieldMatch Deserialization of Untrusted Data R…7.2
• CVE-2024-5580Allegra loadFieldMatch Deserialization of Untrusted Data Rem…7.2
• CVE-2024-5581Allegra unzipFile Directory Traversal Remote Code Execution …7.2
• CVE-2024-5582The Schema & Structured Data for WP & AMP plugin for WordPre…5.4
• CVE-2024-5583The The Plus Addons for Elementor – Elementor Addons, Page T…5.4
• CVE-2024-5584The WordPress Online Booking and Scheduling Plugin – Bookly …6.4
• CVE-2024-5586Zohocorp ManageEngine ADAudit Plus versions below 8121 are v…8.8
• CVE-2024-55864Cross-site scripting vulnerability exists in My WP Customize…4.8
• CVE-2024-5587A vulnerability was found in Casdoor up to 1.335.0. It has b…6.9
• CVE-2024-55875http4k is a functional toolkit for Kotlin HTTP applications.…9.8
• CVE-2024-55876XWiki Platform is a generic wiki platform. Starting in versi…5.4
• CVE-2024-55877XWiki Platform is a generic wiki platform. Starting in versi…8.8