Back to search
CVE-2025-1736
Published: Mar 30, 2025
Modified: Nov 3, 2025
PUBLISHED
Description
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.
| Vendor | Product | Versions |
|---|---|---|
PHP Group | PHP | affected 8.1.* - < 8.1.32affected 8.2.* - < 8.2.28affected 8.3.* - < 8.3.19affected 8.4.* - < 8.4.5 |
Weaknesses (CWE)
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now