NetSight
low3.1

CVE-2025-1217

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obt…

Impact

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME types, etc.

Affected products

VendorProductAffected versions
PhpPhp
from 8.1.0 before 8.1.32
from 8.2.0 before 8.2.28
from 8.3.0 before 8.3.19
from 8.4.0 before 8.4.5

Weakness classification

References