CVE-2025-66384: Php Is Uploaded File Precedence Bypass
A logical precedence error allows short-circuiting of `is_uploaded_file` checks. The condition evaluates an `||` operator where the right side contains the `is_uploaded_file` security check. Due to short-circuiting, if the left side of `||` is true, the `is_uploaded_file` check is entirely skipped, allowing an attacker to supply a malicious local or arbitrar
PHPgreprules fetch cve-2025-66384-php-is-uploaded-file-precedence-bypass --engine opengrepDescription
A logical precedence error allows short-circuiting of `is_uploaded_file` checks. The condition evaluates an `||` operator where the right side contains the `is_uploaded_file` security check. Due to short-circuiting, if the left side of `||` is true, the `is_uploaded_file` check is entirely skipped, allowing an attacker to supply a malicious local or arbitrar
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.