CVE-2022-29248

CVE-2022-29248 is a high-severity vulnerability in Guzzle, a PHP HTTP client, affecting versions prior to 6.5.6 and 7.4.3. It allows a malicious server to set cookies for unrelated domains due to improper cookie domain validation within the cookie middleware. This vulnerability has a CVSS score of 8.1 (High) with an attack vector of Network and low attack complexity, potentially leading to high confidentiality and integrity impacts if exploited. While the cookie middleware is disabled by default, users who manually enable it or use specific client configurations are at risk. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.