CVE-2025-1219 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or S…
Medium CVSS: 6.3

CVE-2025-1219

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.
Vendor
Php
Product
Php
CWE
CWE-1116
Yayın Tarihi
2025-03-30 06:15:13
Güncelleme
2025-11-03 21:18:52
Source Identifier
security@php.net
KEV Date Added
-

Kategoriler

CWE-1116 Php MEDIUM Php 2025

Referanslar

https://github.com/php/php-src/security/advisories/GHSA-p3x9-6h7p-cgfc https://lists.debian.org/debian-lts-announce/2025/03/msg00014.html https://security.netapp.com/advisory/ntap-20250523-0007/ https://github.com/php/php-src/security/advisories/GHSA-p3x9-6h7p-cgfc