CVE Catalog
CVE-2025-1217
MediumSummary
In PHP from 8.1.* before 8.1.32, 8.2.* before 8.2.28, 8.3.* before 8.3.19, 8.4.* before 8.4.5, the HTTP request module incorrectly parses folded headers in HTTP responses, which may lead to misinterpreting the response and using incorrect MIME headers.
Risk Assessment
The application may misinterpret HTTP responses, potentially leading to incorrect content processing or cache poisoning attacks.
Recommendation
Upgrade PHP to version 8.1.32, 8.2.28, 8.3.19, 8.4.5 or later.
Original NVD description (English source)
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when http request module parses HTTP response obtained from a server, folded headers are parsed incorrectly, which may lead to misinterpreting the response and using incorrect headers, MIME