CVE Catalog
CVE-2024-8925
MediumSummary
Parsing error in multipart/form-data in PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12. Erroneous parsing can lead to legitimate data not being processed, and an attacker can control part of the submitted data.
Risk Assessment
An attacker can manipulate submitted data, potentially leading to validation bypass or injection of malicious data.
Recommendation
Update PHP to version 8.1.30, 8.2.24, 8.3.12 or later. Check logs for unusual POST requests.
Original NVD description (English source)
In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to