CVE-2025-1217 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obta…
Medium CVSS: 6.3

CVE-2025-1217

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.
Vendor
Php
Product
Php
CWE
CWE-20
Yayın Tarihi
2025-03-29 06:15:36
Güncelleme
2025-11-03 21:18:52
Source Identifier
security@php.net
KEV Date Added
-

Kategoriler

CWE-20 Php MEDIUM Php 2025

Referanslar

https://github.com/php/php-src/security/advisories/GHSA-v8xr-gpvj-cx9g https://lists.debian.org/debian-lts-announce/2025/03/msg00014.html https://security.netapp.com/advisory/ntap-20250523-0008/ https://github.com/php/php-src/security/advisories/GHSA-v8xr-gpvj-cx9g