In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-commonUpgrade php-pgsqlUpgrade php-soapUpgrade php-jsonUpgrade php-odbcUpgrade php-pdoUpgrade php-pecl-apcu-develUpgrade php-gmpUpgrade php-ldapUpgrade php-pecl-redis6Upgrade php-dbgUpgrade php-mbstringUpgrade php-intlUpgrade php-pecl-apcuUpgrade php-dbaUpgrade libzip-develUpgrade php-pecl-xdebugUpgrade php-opcacheUpgrade php-ffiUpgrade php-xmlUpgrade phpUpgrade php-pearUpgrade php-gdUpgrade php-pecl-zipUpgrade php-develUpgrade php-xmlrpcUpgrade php-enchantUpgrade php-mysqlndUpgrade apcu-panelUpgrade php-processUpgrade libzipUpgrade php-pecl-rrdUpgrade php-fpmUpgrade php-snmpUpgrade php-bcmathUpgrade php-pecl-xdebug3Upgrade libzip-toolsUpgrade php-cliUpgrade php-embedded | Apr 30, 2025 | Mar 30, 2025 |
| Alpine Linux | — | Upgrade php81Upgrade php83Upgrade php82 | Aug 8, 2025 | Mar 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade php-gdUpgrade php-cliUpgrade php-develUpgrade php-sodiumUpgrade php-dbgUpgrade php-pspellUpgrade php-mysqlndUpgrade php-pdoUpgrade phpUpgrade php-embeddedUpgrade php-bcmathUpgrade php-intlUpgrade php-soapUpgrade php-opcacheUpgrade php-enchantUpgrade php-ldapUpgrade php-gmpUpgrade php-fpmUpgrade php-snmpUpgrade php-xmlUpgrade php-debuginfoUpgrade php-commonUpgrade php-mbstringUpgrade php-odbcUpgrade php-pgsqlUpgrade php-processUpgrade php-dba | Apr 2, 2025 | Mar 30, 2025 |
| Amazon_linux_2023 | — | Upgrade php8.1-embedded-debuginfoUpgrade php8.3-pspellUpgrade php8.2-intl-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-pspellUpgrade php8.3-bcmath-debuginfoUpgrade php8.3-processUpgrade php8.2-sodiumUpgrade php8.3-fpm-debuginfoUpgrade php8.2-xml-debuginfoUpgrade php8.1-embeddedUpgrade php8.2-odbcUpgrade php8.3-bcmathUpgrade php8.3-zipUpgrade php8.3-tidyUpgrade php8.3-pgsqlUpgrade php8.3Upgrade php8.3-cliUpgrade php8.3-develUpgrade php8.3-cli-debuginfoUpgrade php8.3-soap-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.3-gmpUpgrade php8.3-opcacheUpgrade php8.1-ffiUpgrade php8.3-pspell-debuginfoUpgrade php8.3-sodium-debuginfoUpgrade php8.2-mbstring-debuginfoUpgrade php8.2-processUpgrade php8.1-dba-debuginfoUpgrade php8.2-snmp-debuginfoUpgrade php8.3-odbc-debuginfoUpgrade php8.3-ldap-debuginfoUpgrade php8.2-ffi-debuginfoUpgrade php8.3-enchantUpgrade php8.2-enchant-debuginfoUpgrade php8.2-ldapUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-soapUpgrade php8.1-intlUpgrade php8.1-tidyUpgrade php8.1-xmlUpgrade php8.3-modphpUpgrade php8.3-dbgUpgrade php8.3-ffi-debuginfoUpgrade php8.1-pdo-debuginfoUpgrade php8.3-gdUpgrade php8.3-gd-debuginfoUpgrade php8.2-gdUpgrade php8.1-commonUpgrade php8.1-process-debuginfoUpgrade php8.2-fpm-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.1-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-debugsourceUpgrade php8.3-odbcUpgrade php8.3-xmlUpgrade php8.3-xml-debuginfoUpgrade php8.2-bcmathUpgrade php8.1-zipUpgrade php8.3-embedded-debuginfoUpgrade php8.3-snmp-debuginfoUpgrade php8.2-pgsql-debuginfoUpgrade php8.3-soapUpgrade php8.2-cliUpgrade php8.1-mbstringUpgrade php8.2-dbaUpgrade php8.3-mbstringUpgrade php8.2-odbc-debuginfoUpgrade php8.2-debuginfoUpgrade php8.2-pdo-debuginfoUpgrade php8.2-fpmUpgrade php8.1-gd-debuginfoUpgrade php8.2-zipUpgrade php8.3-dbg-debuginfoUpgrade php8.3-embeddedUpgrade php8.1-enchant-debuginfoUpgrade php8.1-pdoUpgrade php8.1-fpmUpgrade php8.1-pspell-debuginfoUpgrade php8.1-gmp-debuginfoUpgrade php8.3-opcache-debuginfoUpgrade php8.1-gmpUpgrade php8.2-process-debuginfoUpgrade php8.3-debuginfoUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.1-cliUpgrade php8.1-dbgUpgrade php8.1-fpm-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.1-zip-debuginfoUpgrade php8.2-ffiUpgrade php8.2-mysqlndUpgrade php8.1-dbaUpgrade php8.1-xml-debuginfoUpgrade php8.2-ldap-debuginfoUpgrade php8.1-enchantUpgrade php8.1-opcacheUpgrade php8.1-soap-debuginfoUpgrade php8.3-modphp-debuginfoUpgrade php8.2-opcache-debuginfoUpgrade php8.2-pspellUpgrade php8.1-intl-debuginfoUpgrade php8.2-bcmath-debuginfoUpgrade php8.1-pgsqlUpgrade php8.1Upgrade php8.3-gmp-debuginfoUpgrade php8.1-bcmathUpgrade php8.2-commonUpgrade php8.1-processUpgrade php8.2-sodium-debuginfoUpgrade php8.2-opcacheUpgrade php8.3-intlUpgrade php8.3-commonUpgrade php8.3-fpmUpgrade php8.1-ldapUpgrade php8.2-pdoUpgrade php8.1-opcache-debuginfoUpgrade php8.3-process-debuginfoUpgrade php8.3-pgsql-debuginfoUpgrade php8.2-develUpgrade php8.2-dbgUpgrade php8.2-xmlUpgrade php8.2-snmpUpgrade php8.2-mbstringUpgrade php8.2-gmp-debuginfoUpgrade php8.2-debugsourceUpgrade php8.2-intlUpgrade php8.2-enchantUpgrade php8.1-snmpUpgrade php8.1-ldap-debuginfoUpgrade php8.3-sodiumUpgrade php8.3-pdoUpgrade php8.3-intl-debuginfoUpgrade php8.2-soapUpgrade php8.1-dbg-debuginfoUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.2Upgrade php8.1-tidy-debuginfoUpgrade php8.3-dbaUpgrade php8.2-pspell-debuginfoUpgrade php8.2-pgsqlUpgrade php8.2-gmpUpgrade php8.2-dbg-debuginfoUpgrade php8.3-snmpUpgrade php8.3-ldapUpgrade php8.3-ffiUpgrade php8.3-debugsourceUpgrade php8.2-soap-debuginfoUpgrade php8.2-embedded-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-develUpgrade php8.1-odbcUpgrade php8.3-dba-debuginfoUpgrade php8.2-zip-debuginfoUpgrade php8.2-tidy-debuginfoUpgrade php8.2-tidyUpgrade php8.1-gdUpgrade php8.1-common-debuginfoUpgrade php8.3-pdo-debuginfoUpgrade php8.3-mysqlndUpgrade php8.3-zip-debuginfoUpgrade php8.3-tidy-debuginfoUpgrade php8.3-enchant-debuginfoUpgrade php8.2-embeddedUpgrade php8.1-snmp-debuginfoUpgrade php8.1-ffi-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.3-common-debuginfoUpgrade php8.2-cli-debuginfoUpgrade php8.2-common-debuginfo | Apr 3, 2025 | Mar 30, 2025 |
| Debian | — | Upgrade php8.4Upgrade php7.4Upgrade php8.2 | Mar 17, 2025 | Mar 17, 2025 |
| Freebsd | — | Upgrade php82Upgrade php81Upgrade php83Upgrade php84 | Dec 10, 2025 | Mar 13, 2025 |
| Oracle_linux | — | Upgrade php-xmlUpgrade php-pecl-rrdUpgrade libzip-toolsUpgrade php-pecl-apcuUpgrade php-soapUpgrade php-mysqlndUpgrade php-enchantUpgrade php-gdUpgrade php-processUpgrade apcu-panelUpgrade php-ldapUpgrade libzip-develUpgrade php-opcacheUpgrade php-dbaUpgrade php-pdoUpgrade phpUpgrade php-pecl-zipUpgrade php-cliUpgrade php-snmpUpgrade php-bcmathUpgrade php-ffiUpgrade php-pecl-redis6Upgrade php-intlUpgrade libzipUpgrade php-embeddedUpgrade php-commonUpgrade php-fpmUpgrade php-xmlrpcUpgrade php-gmpUpgrade php-pecl-apcu-develUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-pearUpgrade php-pecl-xdebug3Upgrade php-pgsqlUpgrade php-jsonUpgrade php-mbstringUpgrade php-dbgUpgrade php-odbc | Apr 30, 2025 | Mar 30, 2025 |
| Php | — | Upgrade to PHP version 8.1.32Upgrade to PHP version 8.2.28Upgrade to PHP version 8.3.19Upgrade to PHP version 8.4.5 | Feb 17, 2026 | Feb 17, 2026 |
| Redhat_linux | — | Upgrade php-pecl-zip-debuginfoUpgrade php-develUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pearUpgrade php-pecl-apcu-develUpgrade php-pdoUpgrade php-debugsourceUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-pecl-xdebug3-debugsourceUpgrade php-xmlrpc-debuginfoUpgrade php-bcmathUpgrade php-mbstring-debuginfoUpgrade php-fpmUpgrade php-pecl-apcu-debugsourceUpgrade php-commonUpgrade php-pecl-zipUpgrade php-pecl-xdebugUpgrade php-ffi-debuginfoUpgrade php-odbcUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebug-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-ldapUpgrade php-gd-debuginfoUpgrade php-gmpUpgrade libzipUpgrade php-embedded-debuginfoUpgrade php-enchantUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-pecl-xdebug3Upgrade php-json-debuginfoUpgrade php-cliUpgrade php-pecl-redis6Upgrade php-jsonUpgrade php-dba-debuginfoUpgrade php-enchant-debuginfoUpgrade php-xmlUpgrade php-odbc-debuginfoUpgrade php-gmp-debuginfoUpgrade phpUpgrade libzip-tools-debuginfoNo solution existsUpgrade libzip-debuginfoUpgrade php-snmpUpgrade php-debuginfoUpgrade php-ffiUpgrade php-dbaUpgrade php-pecl-redis6-debugsourceUpgrade php-cli-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-gdUpgrade php-soap-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade apcu-panelUpgrade php-pdo-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-snmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-processUpgrade php-opcacheUpgrade libzip-develUpgrade php-mbstringUpgrade php-ldap-debuginfoUpgrade php-mysqlndUpgrade php-dbg-debuginfoUpgrade php-xmlrpcUpgrade php-soapUpgrade php-intlUpgrade libzip-toolsUpgrade libzip-debugsourceUpgrade php-xml-debuginfoUpgrade php-opcache-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrdUpgrade php-pgsql | Apr 30, 2025 | Mar 30, 2025 |
| Rocky_linux | — | Upgrade php-pecl-xdebug3-debuginfoUpgrade php-mysqlndUpgrade php-pecl-xdebug3-debugsourceUpgrade php-develUpgrade php-jsonUpgrade php-xml-debuginfoUpgrade php-fpmUpgrade php-xmlrpc-debuginfoUpgrade php-odbcUpgrade php-snmpUpgrade php-cliUpgrade php-pgsqlUpgrade php-pecl-apcuUpgrade php-ldapUpgrade libzipUpgrade php-dba-debuginfoUpgrade php-embeddedUpgrade php-pecl-xdebug-debugsourceUpgrade php-xmlUpgrade php-bcmathUpgrade php-commonUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-dbgUpgrade php-pecl-zipUpgrade php-json-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade phpUpgrade php-ffi-debuginfoUpgrade php-pecl-xdebugUpgrade libzip-debuginfoUpgrade php-common-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug-debuginfoUpgrade php-gmp-debuginfoUpgrade php-enchant-debuginfoUpgrade php-gmpUpgrade php-pdoUpgrade php-pecl-xdebug3Upgrade php-pecl-redis6Upgrade php-pecl-zip-debuginfoUpgrade php-pecl-apcu-develUpgrade php-pdo-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php-soap-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade php-enchantUpgrade libzip-develUpgrade php-mysqlnd-debuginfoUpgrade php-mbstringUpgrade php-xmlrpcUpgrade php-processUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-process-debuginfoUpgrade php-odbc-debuginfoUpgrade php-dbaUpgrade php-fpm-debuginfoUpgrade php-snmp-debuginfoUpgrade php-opcacheUpgrade php-intlUpgrade php-embedded-debuginfoUpgrade php-soapUpgrade php-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php-pecl-apcu-debuginfoUpgrade php-ldap-debuginfoUpgrade php-intl-debuginfoUpgrade php-gdUpgrade php-pecl-rrdUpgrade php-ffiUpgrade php-pgsql-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade php7-ldapUpgrade php7-cliUpgrade php7-dbaUpgrade php7-calendarUpgrade php7-socketsUpgrade apache2-mod_php8Upgrade php8-sqliteUpgrade php8-pharUpgrade php7-pgsqlUpgrade php7-shmopUpgrade php7-bz2Upgrade php7-sysvmsgUpgrade php7-mysqlUpgrade php8-domUpgrade php7-zipUpgrade php7-zlibUpgrade php7-pharUpgrade php7-gettextUpgrade php7-posixUpgrade php8-fpmUpgrade php8-ldapUpgrade php7-sysvshmUpgrade php7-jsonUpgrade php8-gmpUpgrade php7Upgrade php8-readlineUpgrade php7-develUpgrade php8-enchantUpgrade php7-mbstringUpgrade php8-bcmathUpgrade php8-gdUpgrade php7-xmlrpcUpgrade php8-opcacheUpgrade php8-testUpgrade php7-pdoUpgrade php7-testUpgrade php8-shmopUpgrade php8-calendarUpgrade php8-gettextUpgrade php7-sqliteUpgrade php8-curlUpgrade php8-fpm-apacheUpgrade php8Upgrade php8-sysvsemUpgrade php8-soapUpgrade php8-odbcUpgrade php8-pgsqlUpgrade php8-ffiUpgrade php7-readlineUpgrade php7-bcmathUpgrade php7-soapUpgrade php8-ctypeUpgrade php7-tokenizerUpgrade php8-intlUpgrade php8-xmlwriterUpgrade php7-odbcUpgrade php8-pdoUpgrade apache2-mod_php7Upgrade php8-bz2Upgrade php7-ftpUpgrade php7-pcntlUpgrade php8-tidyUpgrade php7-iconvUpgrade php7-embedUpgrade php8-zipUpgrade php8-posixUpgrade php7-intlUpgrade php7-fastcgiUpgrade php7-exifUpgrade php8-zlibUpgrade php8-opensslUpgrade php8-iconvUpgrade php8-fastcgiUpgrade php8-embedUpgrade php8-sysvmsgUpgrade php8-mbstringUpgrade php8-tokenizerUpgrade php8-mysqlUpgrade php8-fileinfoUpgrade php7-domUpgrade php7-gdUpgrade php8-ftpUpgrade php8-develUpgrade php7-sysvsemUpgrade php8-pcntlUpgrade php8-xslUpgrade php8-exifUpgrade php7-tidyUpgrade php7-enchantUpgrade php7-ctypeUpgrade php8-cliUpgrade php7-xslUpgrade php7-xmlreaderUpgrade php7-opensslUpgrade php7-curlUpgrade php8-xmlreaderUpgrade php7-fileinfoUpgrade php8-socketsUpgrade php8-snmpUpgrade php8-dbaUpgrade php7-xmlwriterUpgrade php7-sodiumUpgrade php7-opcacheUpgrade php8-sodiumUpgrade php7-gmpUpgrade php8-sysvshmUpgrade php7-fpmUpgrade php7-snmp | Mar 25, 2025 | Mar 24, 2025 |
| Ubuntu | — | Upgrade php8.3-cgiUpgrade php7.4-cliUpgrade php8.1-cgiUpgrade php8.1-cliUpgrade libapache2-mod-php8.3Upgrade php7.4-fpmUpgrade php8.3Upgrade php8.1Upgrade php8.3-cliUpgrade libapache2-mod-php8.0Upgrade libapache2-mod-php8.1Upgrade libapache2-mod-php7.4Upgrade php8.3-fpmUpgrade php8.1-fpmUpgrade php7.4-cgiUpgrade php7.4 | Apr 1, 2025 | Mar 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub