CVE-2025-1736
HIGHPhp < 8.1.32 - Improper Input Validation
Title source: ruleDescription
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.
Scores
CVSS v3
7.3
EPSS
0.0049
EPSS Percentile
65.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Classification
CWE
CWE-20
Status
published
Affected Products (2)
php/php
< 8.1.32
netapp/ontap
Timeline
Published
Mar 30, 2025
Tracked Since
Feb 18, 2026