CVE-2025-1861
MediumSummary
In PHP from 8.1.* before 8.1.32, 8.2.* before 8.2.28, 8.3.* before 8.3.19, 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is a limit on the location value size to 1024 bytes, which may be insufficient per RFC.
Risk Assessment
This limitation may lead to truncation or incorrect processing of redirects, potentially exploited for open redirect attacks or filter bypass.
Recommendation
Upgrade PHP to version 8.1.32, 8.2.28, 8.3.19, 8.4.5 or later.
Original NVD description (English source)
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC91