CVE-2025-1736 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insuffici…
Medium CVSS: 6.3

CVE-2025-1736

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.
Vendor
Php
Product
Php
CWE
CWE-20
Yayın Tarihi
2025-03-30 06:15:14
Güncelleme
2025-11-03 21:18:52
Source Identifier
security@php.net
KEV Date Added
-

Kategoriler

CWE-20 Php MEDIUM Php 2025

Referanslar

https://github.com/php/php-src/security/advisories/GHSA-hgf5-96fm-v528 https://lists.debian.org/debian-lts-announce/2025/03/msg00014.html https://security.netapp.com/advisory/ntap-20250523-0006/