CVE-2025-1217
Low
Description
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.
SeverityLow
CVSS3.1
Exploit probability—
Product
Php
PublishedMar 29, 2025
First seenMar 29, 2025
Weakness typeCWE-20Improper input validation
How to fix
Update
- php php8.1.32, 8.2.28, 8.3.19, 8.4.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php php | 8.1.0 ≤ v < 8.1.32, 8.2.0 ≤ v < 8.2.28, 8.3.0 ≤ v < 8.3.19, 8.4.0 ≤ v < 8.4.5 | 8.1.32, 8.2.28, 8.3.19, 8.4.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.