Malformed HTTP Response Vulnerability in PHP Products
CVE-2025-1217
6.3MEDIUM
What is CVE-2025-1217?
An issue has been identified in PHP versions prior to 8.1.32, 8.2.28, 8.3.19, and 8.4.5 where the http request module incorrectly parses folded HTTP response headers. This flaw could lead to misinterpretation of server responses, potentially resulting in the use of incorrect headers or MIME types, thus posing a risk to application security and data integrity.
Affected Version(s)
PHP 8.1.*
PHP 8.1.* < 8.1.32
PHP 8.2.* < 8.2.28