CVE-2025-1219
MediumSummary
In PHP from 8.1.* before 8.1.32, 8.2.* before 8.2.28, 8.3.* before 8.3.19, 8.4.* before 8.4.5, when requesting an HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect.
Risk Assessment
This may lead to incorrect character encoding interpretation, potentially resulting in data processing errors or XSS attacks.
Recommendation
Upgrade PHP to version 8.1.32, 8.2.28, 8.3.19, 8.4.5 or later.
Original NVD description (English source)
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This ma