Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2024-24752

Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a `RequestHandlerInterface`, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed and for each which contains a file, it is extracted and saved in `/tmp` with a random filename starting with `bref_upload_`. The flow mimics what plain PHP does but it does not delete the temporary files when the request has been processed. An attacker could fill the Lambda instance disk by performing multiple MultiPart requests containing files. This vulnerability is patched in 2.1.13.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.9%
CVSS Severity
CVSS v3 Score 6.5
Products affected by CVE-2024-24752
  • Mnapoli » Bref » Version: 0.1.0
    cpe:2.3:a:mnapoli:bref:0.1.0
  • Mnapoli » Bref » Version: 0.2.0
    cpe:2.3:a:mnapoli:bref:0.2.0
  • Mnapoli » Bref » Version: 0.2.1
    cpe:2.3:a:mnapoli:bref:0.2.1
  • Mnapoli » Bref » Version: 0.2.10
    cpe:2.3:a:mnapoli:bref:0.2.10
  • Mnapoli » Bref » Version: 0.2.11
    cpe:2.3:a:mnapoli:bref:0.2.11
  • Mnapoli » Bref » Version: 0.2.12
    cpe:2.3:a:mnapoli:bref:0.2.12
  • Mnapoli » Bref » Version: 0.2.13
    cpe:2.3:a:mnapoli:bref:0.2.13
  • Mnapoli » Bref » Version: 0.2.14
    cpe:2.3:a:mnapoli:bref:0.2.14
  • Mnapoli » Bref » Version: 0.2.15
    cpe:2.3:a:mnapoli:bref:0.2.15
  • Mnapoli » Bref » Version: 0.2.16
    cpe:2.3:a:mnapoli:bref:0.2.16
  • Mnapoli » Bref » Version: 0.2.17
    cpe:2.3:a:mnapoli:bref:0.2.17
  • Mnapoli » Bref » Version: 0.2.18
    cpe:2.3:a:mnapoli:bref:0.2.18
  • Mnapoli » Bref » Version: 0.2.19
    cpe:2.3:a:mnapoli:bref:0.2.19
  • Mnapoli » Bref » Version: 0.2.2
    cpe:2.3:a:mnapoli:bref:0.2.2
  • Mnapoli » Bref » Version: 0.2.20
    cpe:2.3:a:mnapoli:bref:0.2.20
  • Mnapoli » Bref » Version: 0.2.21
    cpe:2.3:a:mnapoli:bref:0.2.21
  • Mnapoli » Bref » Version: 0.2.22
    cpe:2.3:a:mnapoli:bref:0.2.22
  • Mnapoli » Bref » Version: 0.2.23
    cpe:2.3:a:mnapoli:bref:0.2.23
  • Mnapoli » Bref » Version: 0.2.24
    cpe:2.3:a:mnapoli:bref:0.2.24
  • Mnapoli » Bref » Version: 0.2.25
    cpe:2.3:a:mnapoli:bref:0.2.25
  • Mnapoli » Bref » Version: 0.2.26
    cpe:2.3:a:mnapoli:bref:0.2.26
  • Mnapoli » Bref » Version: 0.2.27
    cpe:2.3:a:mnapoli:bref:0.2.27
  • Mnapoli » Bref » Version: 0.2.28
    cpe:2.3:a:mnapoli:bref:0.2.28
  • Mnapoli » Bref » Version: 0.2.29
    cpe:2.3:a:mnapoli:bref:0.2.29
  • Mnapoli » Bref » Version: 0.2.3
    cpe:2.3:a:mnapoli:bref:0.2.3
  • Mnapoli » Bref » Version: 0.2.30
    cpe:2.3:a:mnapoli:bref:0.2.30
  • Mnapoli » Bref » Version: 0.2.31
    cpe:2.3:a:mnapoli:bref:0.2.31
  • Mnapoli » Bref » Version: 0.2.32
    cpe:2.3:a:mnapoli:bref:0.2.32
  • Mnapoli » Bref » Version: 0.2.33
    cpe:2.3:a:mnapoli:bref:0.2.33
  • Mnapoli » Bref » Version: 0.2.34
    cpe:2.3:a:mnapoli:bref:0.2.34
  • Mnapoli » Bref » Version: 0.2.35
    cpe:2.3:a:mnapoli:bref:0.2.35
  • Mnapoli » Bref » Version: 0.2.36
    cpe:2.3:a:mnapoli:bref:0.2.36
  • Mnapoli » Bref » Version: 0.2.37
    cpe:2.3:a:mnapoli:bref:0.2.37
  • Mnapoli » Bref » Version: 0.2.4
    cpe:2.3:a:mnapoli:bref:0.2.4
  • Mnapoli » Bref » Version: 0.2.5
    cpe:2.3:a:mnapoli:bref:0.2.5
  • Mnapoli » Bref » Version: 0.2.6
    cpe:2.3:a:mnapoli:bref:0.2.6
  • Mnapoli » Bref » Version: 0.2.7
    cpe:2.3:a:mnapoli:bref:0.2.7
  • Mnapoli » Bref » Version: 0.2.8
    cpe:2.3:a:mnapoli:bref:0.2.8
  • Mnapoli » Bref » Version: 0.2.9
    cpe:2.3:a:mnapoli:bref:0.2.9
  • Mnapoli » Bref » Version: 0.3.0
    cpe:2.3:a:mnapoli:bref:0.3.0
  • Mnapoli » Bref » Version: 0.3.1
    cpe:2.3:a:mnapoli:bref:0.3.1
  • Mnapoli » Bref » Version: 0.3.2
    cpe:2.3:a:mnapoli:bref:0.3.2
  • Mnapoli » Bref » Version: 0.3.3
    cpe:2.3:a:mnapoli:bref:0.3.3
  • Mnapoli » Bref » Version: 0.3.4
    cpe:2.3:a:mnapoli:bref:0.3.4
  • Mnapoli » Bref » Version: 0.3.5
    cpe:2.3:a:mnapoli:bref:0.3.5
  • Mnapoli » Bref » Version: 0.3.6
    cpe:2.3:a:mnapoli:bref:0.3.6
  • Mnapoli » Bref » Version: 0.3.7
    cpe:2.3:a:mnapoli:bref:0.3.7
  • Mnapoli » Bref » Version: 0.3.8
    cpe:2.3:a:mnapoli:bref:0.3.8
  • Mnapoli » Bref » Version: 0.3.9
    cpe:2.3:a:mnapoli:bref:0.3.9
  • Mnapoli » Bref » Version: 0.4.0
    cpe:2.3:a:mnapoli:bref:0.4.0
  • Mnapoli » Bref » Version: 0.4.1
    cpe:2.3:a:mnapoli:bref:0.4.1
  • Mnapoli » Bref » Version: 0.5.0
    cpe:2.3:a:mnapoli:bref:0.5.0
  • Mnapoli » Bref » Version: 0.5.1
    cpe:2.3:a:mnapoli:bref:0.5.1
  • Mnapoli » Bref » Version: 0.5.10
    cpe:2.3:a:mnapoli:bref:0.5.10
  • Mnapoli » Bref » Version: 0.5.11
    cpe:2.3:a:mnapoli:bref:0.5.11
  • Mnapoli » Bref » Version: 0.5.12
    cpe:2.3:a:mnapoli:bref:0.5.12
  • Mnapoli » Bref » Version: 0.5.13
    cpe:2.3:a:mnapoli:bref:0.5.13
  • Mnapoli » Bref » Version: 0.5.14
    cpe:2.3:a:mnapoli:bref:0.5.14
  • Mnapoli » Bref » Version: 0.5.15
    cpe:2.3:a:mnapoli:bref:0.5.15
  • Mnapoli » Bref » Version: 0.5.16
    cpe:2.3:a:mnapoli:bref:0.5.16
  • Mnapoli » Bref » Version: 0.5.17
    cpe:2.3:a:mnapoli:bref:0.5.17
  • Mnapoli » Bref » Version: 0.5.18
    cpe:2.3:a:mnapoli:bref:0.5.18
  • Mnapoli » Bref » Version: 0.5.19
    cpe:2.3:a:mnapoli:bref:0.5.19
  • Mnapoli » Bref » Version: 0.5.2
    cpe:2.3:a:mnapoli:bref:0.5.2
  • Mnapoli » Bref » Version: 0.5.20
    cpe:2.3:a:mnapoli:bref:0.5.20
  • Mnapoli » Bref » Version: 0.5.21
    cpe:2.3:a:mnapoli:bref:0.5.21
  • Mnapoli » Bref » Version: 0.5.22
    cpe:2.3:a:mnapoli:bref:0.5.22
  • Mnapoli » Bref » Version: 0.5.23
    cpe:2.3:a:mnapoli:bref:0.5.23
  • Mnapoli » Bref » Version: 0.5.24
    cpe:2.3:a:mnapoli:bref:0.5.24
  • Mnapoli » Bref » Version: 0.5.25
    cpe:2.3:a:mnapoli:bref:0.5.25
  • Mnapoli » Bref » Version: 0.5.26
    cpe:2.3:a:mnapoli:bref:0.5.26
  • Mnapoli » Bref » Version: 0.5.27
    cpe:2.3:a:mnapoli:bref:0.5.27
  • Mnapoli » Bref » Version: 0.5.28
    cpe:2.3:a:mnapoli:bref:0.5.28
  • Mnapoli » Bref » Version: 0.5.29
    cpe:2.3:a:mnapoli:bref:0.5.29
  • Mnapoli » Bref » Version: 0.5.3
    cpe:2.3:a:mnapoli:bref:0.5.3
  • Mnapoli » Bref » Version: 0.5.30
    cpe:2.3:a:mnapoli:bref:0.5.30
  • Mnapoli » Bref » Version: 0.5.31
    cpe:2.3:a:mnapoli:bref:0.5.31
  • Mnapoli » Bref » Version: 0.5.32
    cpe:2.3:a:mnapoli:bref:0.5.32
  • Mnapoli » Bref » Version: 0.5.33
    cpe:2.3:a:mnapoli:bref:0.5.33
  • Mnapoli » Bref » Version: 0.5.4
    cpe:2.3:a:mnapoli:bref:0.5.4
  • Mnapoli » Bref » Version: 0.5.5
    cpe:2.3:a:mnapoli:bref:0.5.5
  • Mnapoli » Bref » Version: 0.5.6
    cpe:2.3:a:mnapoli:bref:0.5.6
  • Mnapoli » Bref » Version: 0.5.7
    cpe:2.3:a:mnapoli:bref:0.5.7
  • Mnapoli » Bref » Version: 0.5.8
    cpe:2.3:a:mnapoli:bref:0.5.8
  • Mnapoli » Bref » Version: 0.5.9
    cpe:2.3:a:mnapoli:bref:0.5.9
  • Mnapoli » Bref » Version: 1.0.0
    cpe:2.3:a:mnapoli:bref:1.0.0
  • Mnapoli » Bref » Version: 1.0.1
    cpe:2.3:a:mnapoli:bref:1.0.1
  • Mnapoli » Bref » Version: 1.0.2
    cpe:2.3:a:mnapoli:bref:1.0.2
  • Mnapoli » Bref » Version: 1.1.0
    cpe:2.3:a:mnapoli:bref:1.1.0
  • Mnapoli » Bref » Version: 1.1.1
    cpe:2.3:a:mnapoli:bref:1.1.1
  • Mnapoli » Bref » Version: 1.1.2
    cpe:2.3:a:mnapoli:bref:1.1.2
  • Mnapoli » Bref » Version: 1.1.3
    cpe:2.3:a:mnapoli:bref:1.1.3
  • Mnapoli » Bref » Version: 1.1.4
    cpe:2.3:a:mnapoli:bref:1.1.4
  • Mnapoli » Bref » Version: 1.2.0
    cpe:2.3:a:mnapoli:bref:1.2.0
  • Mnapoli » Bref » Version: 1.2.1
    cpe:2.3:a:mnapoli:bref:1.2.1
  • Mnapoli » Bref » Version: 1.2.10
    cpe:2.3:a:mnapoli:bref:1.2.10
  • Mnapoli » Bref » Version: 1.2.11
    cpe:2.3:a:mnapoli:bref:1.2.11
  • Mnapoli » Bref » Version: 1.2.12
    cpe:2.3:a:mnapoli:bref:1.2.12
  • Mnapoli » Bref » Version: 1.2.13
    cpe:2.3:a:mnapoli:bref:1.2.13
  • Mnapoli » Bref » Version: 1.2.14
    cpe:2.3:a:mnapoli:bref:1.2.14
  • Mnapoli » Bref » Version: 1.2.2
    cpe:2.3:a:mnapoli:bref:1.2.2
  • Mnapoli » Bref » Version: 1.2.3
    cpe:2.3:a:mnapoli:bref:1.2.3
  • Mnapoli » Bref » Version: 1.2.4
    cpe:2.3:a:mnapoli:bref:1.2.4
  • Mnapoli » Bref » Version: 1.2.5
    cpe:2.3:a:mnapoli:bref:1.2.5
  • Mnapoli » Bref » Version: 1.2.6
    cpe:2.3:a:mnapoli:bref:1.2.6
  • Mnapoli » Bref » Version: 1.2.7
    cpe:2.3:a:mnapoli:bref:1.2.7
  • Mnapoli » Bref » Version: 1.2.8
    cpe:2.3:a:mnapoli:bref:1.2.8
  • Mnapoli » Bref » Version: 1.2.9
    cpe:2.3:a:mnapoli:bref:1.2.9
  • Mnapoli » Bref » Version: 1.3.0
    cpe:2.3:a:mnapoli:bref:1.3.0
  • Mnapoli » Bref » Version: 1.3.1
    cpe:2.3:a:mnapoli:bref:1.3.1
  • Mnapoli » Bref » Version: 1.3.2
    cpe:2.3:a:mnapoli:bref:1.3.2
  • Mnapoli » Bref » Version: 1.3.3
    cpe:2.3:a:mnapoli:bref:1.3.3
  • Mnapoli » Bref » Version: 1.3.4
    cpe:2.3:a:mnapoli:bref:1.3.4
  • Mnapoli » Bref » Version: 1.3.5
    cpe:2.3:a:mnapoli:bref:1.3.5
  • Mnapoli » Bref » Version: 1.3.6
    cpe:2.3:a:mnapoli:bref:1.3.6
  • Mnapoli » Bref » Version: 1.4.0
    cpe:2.3:a:mnapoli:bref:1.4.0
  • Mnapoli » Bref » Version: 1.4.1
    cpe:2.3:a:mnapoli:bref:1.4.1
  • Mnapoli » Bref » Version: 1.4.2
    cpe:2.3:a:mnapoli:bref:1.4.2
  • Mnapoli » Bref » Version: 1.5.0
    cpe:2.3:a:mnapoli:bref:1.5.0
  • Mnapoli » Bref » Version: 1.5.1
    cpe:2.3:a:mnapoli:bref:1.5.1
  • Mnapoli » Bref » Version: 1.5.2
    cpe:2.3:a:mnapoli:bref:1.5.2
  • Mnapoli » Bref » Version: 1.5.3
    cpe:2.3:a:mnapoli:bref:1.5.3
  • Mnapoli » Bref » Version: 1.5.4
    cpe:2.3:a:mnapoli:bref:1.5.4
  • Mnapoli » Bref » Version: 1.5.5
    cpe:2.3:a:mnapoli:bref:1.5.5
  • Mnapoli » Bref » Version: 1.5.6
    cpe:2.3:a:mnapoli:bref:1.5.6
  • Mnapoli » Bref » Version: 1.5.7
    cpe:2.3:a:mnapoli:bref:1.5.7
  • Mnapoli » Bref » Version: 1.5.8
    cpe:2.3:a:mnapoli:bref:1.5.8
  • Mnapoli » Bref » Version: 1.6.0
    cpe:2.3:a:mnapoli:bref:1.6.0
  • Mnapoli » Bref » Version: 1.7.0
    cpe:2.3:a:mnapoli:bref:1.7.0
  • Mnapoli » Bref » Version: 1.7.1
    cpe:2.3:a:mnapoli:bref:1.7.1
  • Mnapoli » Bref » Version: 1.7.10
    cpe:2.3:a:mnapoli:bref:1.7.10
  • Mnapoli » Bref » Version: 1.7.11
    cpe:2.3:a:mnapoli:bref:1.7.11
  • Mnapoli » Bref » Version: 1.7.12
    cpe:2.3:a:mnapoli:bref:1.7.12
  • Mnapoli » Bref » Version: 1.7.13
    cpe:2.3:a:mnapoli:bref:1.7.13
  • Mnapoli » Bref » Version: 1.7.14
    cpe:2.3:a:mnapoli:bref:1.7.14
  • Mnapoli » Bref » Version: 1.7.15
    cpe:2.3:a:mnapoli:bref:1.7.15
  • Mnapoli » Bref » Version: 1.7.16
    cpe:2.3:a:mnapoli:bref:1.7.16
  • Mnapoli » Bref » Version: 1.7.17
    cpe:2.3:a:mnapoli:bref:1.7.17
  • Mnapoli » Bref » Version: 1.7.18
    cpe:2.3:a:mnapoli:bref:1.7.18
  • Mnapoli » Bref » Version: 1.7.19
    cpe:2.3:a:mnapoli:bref:1.7.19
  • Mnapoli » Bref » Version: 1.7.2
    cpe:2.3:a:mnapoli:bref:1.7.2
  • Mnapoli » Bref » Version: 1.7.20
    cpe:2.3:a:mnapoli:bref:1.7.20
  • Mnapoli » Bref » Version: 1.7.21
    cpe:2.3:a:mnapoli:bref:1.7.21
  • Mnapoli » Bref » Version: 1.7.22
    cpe:2.3:a:mnapoli:bref:1.7.22
  • Mnapoli » Bref » Version: 1.7.23
    cpe:2.3:a:mnapoli:bref:1.7.23
  • Mnapoli » Bref » Version: 1.7.24
    cpe:2.3:a:mnapoli:bref:1.7.24
  • Mnapoli » Bref » Version: 1.7.25
    cpe:2.3:a:mnapoli:bref:1.7.25
  • Mnapoli » Bref » Version: 1.7.26
    cpe:2.3:a:mnapoli:bref:1.7.26
  • Mnapoli » Bref » Version: 1.7.27
    cpe:2.3:a:mnapoli:bref:1.7.27
  • Mnapoli » Bref » Version: 1.7.28
    cpe:2.3:a:mnapoli:bref:1.7.28
  • Mnapoli » Bref » Version: 1.7.29
    cpe:2.3:a:mnapoli:bref:1.7.29
  • Mnapoli » Bref » Version: 1.7.3
    cpe:2.3:a:mnapoli:bref:1.7.3
  • Mnapoli » Bref » Version: 1.7.30
    cpe:2.3:a:mnapoli:bref:1.7.30
  • Mnapoli » Bref » Version: 1.7.31
    cpe:2.3:a:mnapoli:bref:1.7.31
  • Mnapoli » Bref » Version: 1.7.32
    cpe:2.3:a:mnapoli:bref:1.7.32
  • Mnapoli » Bref » Version: 1.7.33
    cpe:2.3:a:mnapoli:bref:1.7.33
  • Mnapoli » Bref » Version: 1.7.34
    cpe:2.3:a:mnapoli:bref:1.7.34
  • Mnapoli » Bref » Version: 1.7.35
    cpe:2.3:a:mnapoli:bref:1.7.35
  • Mnapoli » Bref » Version: 1.7.36
    cpe:2.3:a:mnapoli:bref:1.7.36
  • Mnapoli » Bref » Version: 1.7.37
    cpe:2.3:a:mnapoli:bref:1.7.37
  • Mnapoli » Bref » Version: 1.7.38
    cpe:2.3:a:mnapoli:bref:1.7.38
  • Mnapoli » Bref » Version: 1.7.39
    cpe:2.3:a:mnapoli:bref:1.7.39
  • Mnapoli » Bref » Version: 1.7.4
    cpe:2.3:a:mnapoli:bref:1.7.4
  • Mnapoli » Bref » Version: 1.7.40
    cpe:2.3:a:mnapoli:bref:1.7.40
  • Mnapoli » Bref » Version: 1.7.41
    cpe:2.3:a:mnapoli:bref:1.7.41
  • Mnapoli » Bref » Version: 1.7.42
    cpe:2.3:a:mnapoli:bref:1.7.42
  • Mnapoli » Bref » Version: 1.7.5
    cpe:2.3:a:mnapoli:bref:1.7.5
  • Mnapoli » Bref » Version: 1.7.6
    cpe:2.3:a:mnapoli:bref:1.7.6
  • Mnapoli » Bref » Version: 1.7.7
    cpe:2.3:a:mnapoli:bref:1.7.7
  • Mnapoli » Bref » Version: 1.7.8
    cpe:2.3:a:mnapoli:bref:1.7.8
  • Mnapoli » Bref » Version: 1.7.9
    cpe:2.3:a:mnapoli:bref:1.7.9
  • Mnapoli » Bref » Version: 2.0.0
    cpe:2.3:a:mnapoli:bref:2.0.0
  • Mnapoli » Bref » Version: 2.0.1
    cpe:2.3:a:mnapoli:bref:2.0.1
  • Mnapoli » Bref » Version: 2.0.10
    cpe:2.3:a:mnapoli:bref:2.0.10
  • Mnapoli » Bref » Version: 2.0.11
    cpe:2.3:a:mnapoli:bref:2.0.11
  • Mnapoli » Bref » Version: 2.0.2
    cpe:2.3:a:mnapoli:bref:2.0.2
  • Mnapoli » Bref » Version: 2.0.3
    cpe:2.3:a:mnapoli:bref:2.0.3
  • Mnapoli » Bref » Version: 2.0.4
    cpe:2.3:a:mnapoli:bref:2.0.4
  • Mnapoli » Bref » Version: 2.0.5
    cpe:2.3:a:mnapoli:bref:2.0.5
  • Mnapoli » Bref » Version: 2.0.6
    cpe:2.3:a:mnapoli:bref:2.0.6
  • Mnapoli » Bref » Version: 2.0.7
    cpe:2.3:a:mnapoli:bref:2.0.7
  • Mnapoli » Bref » Version: 2.0.8
    cpe:2.3:a:mnapoli:bref:2.0.8
  • Mnapoli » Bref » Version: 2.0.9
    cpe:2.3:a:mnapoli:bref:2.0.9
  • Mnapoli » Bref » Version: 2.1.0
    cpe:2.3:a:mnapoli:bref:2.1.0
  • Mnapoli » Bref » Version: 2.1.1
    cpe:2.3:a:mnapoli:bref:2.1.1
  • Mnapoli » Bref » Version: 2.1.10
    cpe:2.3:a:mnapoli:bref:2.1.10
  • Mnapoli » Bref » Version: 2.1.11
    cpe:2.3:a:mnapoli:bref:2.1.11
  • Mnapoli » Bref » Version: 2.1.12
    cpe:2.3:a:mnapoli:bref:2.1.12
  • Mnapoli » Bref » Version: 2.1.2
    cpe:2.3:a:mnapoli:bref:2.1.2
  • Mnapoli » Bref » Version: 2.1.3
    cpe:2.3:a:mnapoli:bref:2.1.3
  • Mnapoli » Bref » Version: 2.1.4
    cpe:2.3:a:mnapoli:bref:2.1.4
  • Mnapoli » Bref » Version: 2.1.5
    cpe:2.3:a:mnapoli:bref:2.1.5
  • Mnapoli » Bref » Version: 2.1.6
    cpe:2.3:a:mnapoli:bref:2.1.6
  • Mnapoli » Bref » Version: 2.1.7
    cpe:2.3:a:mnapoli:bref:2.1.7
  • Mnapoli » Bref » Version: 2.1.8
    cpe:2.3:a:mnapoli:bref:2.1.8
  • Mnapoli » Bref » Version: 2.1.9
    cpe:2.3:a:mnapoli:bref:2.1.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved