CVEvulnerability

CVE-2025-1861

6.3 MEDIUM Published 2025-03-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-03-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 4.0 ([email protected])
6.3 MEDIUM — CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-131

Description

In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location.

Affected configurations

• php php (>= 8.1.0 < 8.1.31) • php php (>= 8.2.0 < 8.2.26) • php php (>= 8.3.0 < 8.3.14) • php php (>= 8.4.0 < 8.4.5) • netapp ontap 9

Related

Weakness · CWE (1)

  • CWE-131 Incorrect Calculation of Buffer Size weakness

References