In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.
CVSS Details
- CVSS 4.0 Base Score: 6.3 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade php-pecl-apcuUpgrade php-ldapUpgrade php-jsonUpgrade php-mbstringUpgrade php-intlUpgrade php-dbaUpgrade php-dbgUpgrade php-pgsqlUpgrade php-pecl-redis6Upgrade php-gmpUpgrade php-commonUpgrade php-pecl-apcu-develUpgrade php-odbcUpgrade php-soapUpgrade php-pdoUpgrade php-bcmathUpgrade php-pearUpgrade php-pecl-rrdUpgrade php-enchantUpgrade php-embeddedUpgrade php-xmlUpgrade php-ffiUpgrade libzip-develUpgrade phpUpgrade php-opcacheUpgrade apcu-panelUpgrade php-pecl-xdebugUpgrade php-pecl-xdebug3Upgrade php-cliUpgrade libzip-toolsUpgrade php-gdUpgrade php-xmlrpcUpgrade libzipUpgrade php-mysqlndUpgrade php-processUpgrade php-develUpgrade php-snmpUpgrade php-fpmUpgrade php-pecl-zip | Apr 30, 2025 | Mar 30, 2025 |
| Alpine Linux | — | Upgrade php82Upgrade php83Upgrade php81 | Aug 8, 2025 | Mar 30, 2025 |
| Amazon Linux Ami 2 | — | Upgrade php-enchantUpgrade phpUpgrade php-develUpgrade php-gmpUpgrade php-fpmUpgrade php-mysqlndUpgrade php-opcacheUpgrade php-ldapUpgrade php-gdUpgrade php-dbgUpgrade php-intlUpgrade php-cliUpgrade php-pspellUpgrade php-pdoUpgrade php-bcmathUpgrade php-sodiumUpgrade php-soapUpgrade php-embeddedUpgrade php-xmlUpgrade php-pgsqlUpgrade php-mbstringUpgrade php-commonUpgrade php-dbaUpgrade php-processUpgrade php-debuginfoUpgrade php-snmpUpgrade php-odbc | Apr 2, 2025 | Mar 30, 2025 |
| Amazon_linux_2023 | — | Upgrade php8.3-cli-debuginfoUpgrade php8.1-embedded-debuginfoUpgrade php8.3-mbstring-debuginfoUpgrade php8.2-zip-debuginfoUpgrade php8.1-bcmath-debuginfoUpgrade php8.3-zip-debuginfoUpgrade php8.3-tidy-debuginfoUpgrade php8.1-pdoUpgrade php8.1-fpmUpgrade php8.1-xml-debuginfoUpgrade php8.2-zipUpgrade php8.2-debuginfoUpgrade php8.1-gmpUpgrade php8.1-develUpgrade php8.2-embedded-debuginfoUpgrade php8.1-odbc-debuginfoUpgrade php8.1-dbg-debuginfoUpgrade php8.2-dbg-debuginfoUpgrade php8.2-tidyUpgrade php8.2-bcmath-debuginfoUpgrade php8.1-odbcUpgrade php8.1-gdUpgrade php8.1-common-debuginfoUpgrade php8.3-mysqlndUpgrade php8.3-dba-debuginfoUpgrade php8.2-pspell-debuginfoUpgrade php8.1-processUpgrade php8.3-snmpUpgrade php8.2-snmpUpgrade php8.3-intl-debuginfoUpgrade php8.2-soapUpgrade php8.2-mysqlnd-debuginfoUpgrade php8.1-snmpUpgrade php8.1-ldap-debuginfoUpgrade php8.3-pdoUpgrade php8.3-sodiumUpgrade php8.1-pgsqlUpgrade php8.1-ffi-debuginfoUpgrade php8.1-cli-debuginfoUpgrade php8.3-fpmUpgrade php8.3-enchant-debuginfoUpgrade php8.2-embeddedUpgrade php8.1-snmp-debuginfoUpgrade php8.2-develUpgrade php8.2-dbgUpgrade php8.1-opcache-debuginfoUpgrade php8.3-pgsql-debuginfoUpgrade php8.2-xmlUpgrade php8.2-mbstringUpgrade php8.2-pspellUpgrade php8.2-opcacheUpgrade php8.3-commonUpgrade php8.2-pgsqlUpgrade php8.2-ldap-debuginfoUpgrade php8.2-gmpUpgrade php8.2Upgrade php8.3-dbaUpgrade php8.1-bcmathUpgrade php8.2-debugsourceUpgrade php8.2-opcache-debuginfoUpgrade php8.2-gmp-debuginfoUpgrade php8.2-common-debuginfoUpgrade php8.1-enchantUpgrade php8.1Upgrade php8.2-cli-debuginfoUpgrade php8.3-modphp-debuginfoUpgrade php8.1-opcacheUpgrade php8.3-intlUpgrade php8.2-sodium-debuginfoUpgrade php8.2-commonUpgrade php8.3-ffiUpgrade php8.3-debugsourceUpgrade php8.2-soap-debuginfoUpgrade php8.2-dba-debuginfoUpgrade php8.3-gmp-debuginfoUpgrade php8.3-zipUpgrade php8.3-tidyUpgrade php8.3-develUpgrade php8.3-bcmath-debuginfoUpgrade php8.2-bcmathUpgrade php8.3-pgsqlUpgrade php8.1-pspell-debuginfoUpgrade php8.3-dbg-debuginfoUpgrade php8.3-opcache-debuginfoUpgrade php8.1-pspellUpgrade php8.1-dba-debuginfoUpgrade php8.3-ldap-debuginfoUpgrade php8.2-ldapUpgrade php8.2-cliUpgrade php8.1-process-debuginfoUpgrade php8.1-mysqlndUpgrade php8.1-debugsourceUpgrade php8.1-debuginfoUpgrade php8.1-commonUpgrade php8.3-xml-debuginfoUpgrade php8.3-xmlUpgrade php8.3-odbcUpgrade php8.3-modphpUpgrade php8.3-gd-debuginfoUpgrade php8.3-gdUpgrade php8.3-ffi-debuginfoUpgrade php8.3-dbgUpgrade php8.2-processUpgrade php8.2-mbstring-debuginfoUpgrade php8.3-enchantUpgrade php8.2-snmp-debuginfoUpgrade php8.3-odbc-debuginfoUpgrade php8.1-ldapUpgrade php8.1-tidyUpgrade php8.1-soapUpgrade php8.1-pdo-debuginfoUpgrade php8.1-soap-debuginfoUpgrade php8.2-ffi-debuginfoUpgrade php8.1-xmlUpgrade php8.1-mysqlnd-debuginfoUpgrade php8.1-tidy-debuginfoUpgrade php8.1-intlUpgrade php8.3-sodium-debuginfoUpgrade php8.3-soap-debuginfoUpgrade php8.3-pspell-debuginfoUpgrade php8.2-odbcUpgrade php8.2-enchant-debuginfoUpgrade php8.2-gd-debuginfoUpgrade php8.2-pdoUpgrade php8.2-gdUpgrade php8.2-fpm-debuginfoUpgrade php8.3-cliUpgrade php8.3-process-debuginfoUpgrade php8.3-bcmathUpgrade php8.3-embedded-debuginfoUpgrade php8.2-dbaUpgrade php8.3-ldapUpgrade php8.2-pgsql-debuginfoUpgrade php8.1-mbstringUpgrade php8.1-ffiUpgrade php8.3-soapUpgrade php8.3-snmp-debuginfoUpgrade php8.3-mbstringUpgrade php8.3-gmpUpgrade php8.2-pdo-debuginfoUpgrade php8.3-processUpgrade php8.2-fpmUpgrade php8.1-zipUpgrade php8.2-enchantUpgrade php8.1-gmp-debuginfoUpgrade php8.1-enchant-debuginfoUpgrade php8.2-process-debuginfoUpgrade php8.2-intlUpgrade php8.1-gd-debuginfoUpgrade php8.2-odbc-debuginfoUpgrade php8.2-ffiUpgrade php8.1-zip-debuginfoUpgrade php8.1-dbgUpgrade php8.1-dbaUpgrade php8.1-cliUpgrade php8.3-common-debuginfoUpgrade php8.3-mysqlnd-debuginfoUpgrade php8.1-fpm-debuginfoUpgrade php8.1-pgsql-debuginfoUpgrade php8.3-pdo-debuginfoUpgrade php8.3Upgrade php8.2-xml-debuginfoUpgrade php8.2-sodiumUpgrade php8.2-tidy-debuginfoUpgrade php8.2-intl-debuginfoUpgrade php8.1-mbstring-debuginfoUpgrade php8.1-embeddedUpgrade php8.3-pspellUpgrade php8.3-opcacheUpgrade php8.2-mysqlndUpgrade php8.3-debuginfoUpgrade php8.1-intl-debuginfoUpgrade php8.3-fpm-debuginfoUpgrade php8.3-embedded | Apr 3, 2025 | Mar 30, 2025 |
| Debian | — | Upgrade php7.4Upgrade php8.2Upgrade php8.4 | Mar 17, 2025 | Mar 17, 2025 |
| Freebsd | — | Upgrade php81Upgrade php82Upgrade php84Upgrade php83 | Dec 10, 2025 | Mar 13, 2025 |
| Oracle_linux | — | Upgrade phpUpgrade php-pecl-apcuUpgrade php-snmpUpgrade php-processUpgrade php-cliUpgrade php-pecl-rrdUpgrade php-pdoUpgrade php-embeddedUpgrade php-soapUpgrade php-enchantUpgrade php-mysqlndUpgrade apcu-panelUpgrade libzipUpgrade php-gdUpgrade libzip-toolsUpgrade php-ffiUpgrade php-intlUpgrade php-pecl-redis6Upgrade php-xmlUpgrade libzip-develUpgrade php-dbaUpgrade php-ldapUpgrade php-pecl-zipUpgrade php-bcmathUpgrade php-opcacheUpgrade php-commonUpgrade php-develUpgrade php-pecl-xdebugUpgrade php-fpmUpgrade php-odbcUpgrade php-pecl-apcu-develUpgrade php-pecl-xdebug3Upgrade php-gmpUpgrade php-xmlrpcUpgrade php-dbgUpgrade php-mbstringUpgrade php-pearUpgrade php-jsonUpgrade php-pgsql | Apr 30, 2025 | Mar 30, 2025 |
| Php | — | Upgrade to PHP version 8.2.28Upgrade to PHP version 8.1.32Upgrade to PHP version 8.4.5Upgrade to PHP version 8.3.19 | Feb 17, 2026 | Feb 17, 2026 |
| Redhat_linux | — | Upgrade php-pecl-zipUpgrade php-odbc-debuginfoUpgrade php-dbgUpgrade php-ldapUpgrade php-embedded-debuginfoUpgrade php-cliUpgrade php-jsonUpgrade php-json-debuginfoUpgrade php-ffi-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-gmpUpgrade php-embeddedUpgrade php-pecl-apcuUpgrade php-pecl-xdebug3Upgrade php-bcmathUpgrade php-pdoUpgrade php-xmlrpc-debuginfoUpgrade php-enchantUpgrade php-pecl-xdebug-debugsourceUpgrade php-pearUpgrade php-pecl-zip-debugsourceUpgrade php-pecl-xdebugUpgrade php-pecl-zip-debuginfoUpgrade php-commonUpgrade php-odbcUpgrade php-pecl-xdebug-debuginfoUpgrade php-pecl-xdebug3-debuginfoUpgrade php-develUpgrade php-dba-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-debugsourceUpgrade php-gmp-debuginfoUpgrade php-xmlUpgrade php-pecl-rrd-debuginfoUpgrade php-gd-debuginfoUpgrade php-fpmUpgrade php-mbstring-debuginfoUpgrade php-common-debuginfoUpgrade libzip-tools-debuginfoUpgrade libzip-debuginfoUpgrade phpUpgrade php-enchant-debuginfoUpgrade php-pecl-redis6Upgrade libzipNo solution existsUpgrade php-pecl-apcu-develUpgrade php-opcache-debuginfoUpgrade php-dbaUpgrade php-snmp-debuginfoUpgrade php-fpm-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-processUpgrade php-snmpUpgrade php-ffiUpgrade php-intl-debuginfoUpgrade php-process-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-mysqlnd-debuginfoUpgrade php-pecl-redis6-debuginfoUpgrade php-pecl-rrdUpgrade apcu-panelUpgrade php-opcacheUpgrade php-debuginfoUpgrade php-soap-debuginfoUpgrade libzip-toolsUpgrade php-xmlrpcUpgrade php-mbstringUpgrade php-ldap-debuginfoUpgrade php-xml-debuginfoUpgrade php-dbg-debuginfoUpgrade php-pgsqlUpgrade php-pdo-debuginfoUpgrade php-cli-debuginfoUpgrade php-intlUpgrade libzip-debugsourceUpgrade php-soapUpgrade php-mysqlndUpgrade libzip-develUpgrade php-gdUpgrade php-pecl-redis6-debugsourceUpgrade php-bcmath-debuginfoUpgrade php-pecl-apcu-debuginfo | Apr 30, 2025 | Mar 30, 2025 |
| Rocky_linux | — | Upgrade php-gmp-debuginfoUpgrade php-pecl-zip-debugsourceUpgrade php-develUpgrade php-bcmathUpgrade php-xmlrpc-debuginfoUpgrade php-ldapUpgrade php-mysqlndUpgrade php-pecl-xdebug-debugsourceUpgrade phpUpgrade php-pecl-xdebug3-debuginfoUpgrade php-pecl-apcuUpgrade php-json-debuginfoUpgrade php-pecl-xdebug3-debugsourceUpgrade php-pdoUpgrade php-dbgUpgrade php-common-debuginfoUpgrade php-cliUpgrade php-fpmUpgrade php-odbcUpgrade php-enchant-debuginfoUpgrade php-snmpUpgrade php-mbstring-debuginfoUpgrade php-pecl-xdebug3Upgrade php-pgsqlUpgrade php-xml-debuginfoUpgrade php-debugsourceUpgrade php-gd-debuginfoUpgrade php-embeddedUpgrade php-pecl-xdebug-debuginfoUpgrade php-ffi-debuginfoUpgrade libzipUpgrade php-pecl-zipUpgrade php-dba-debuginfoUpgrade php-commonUpgrade php-pecl-redis6Upgrade php-pecl-xdebugUpgrade php-gmpUpgrade php-xmlUpgrade php-pecl-zip-debuginfoUpgrade libzip-debuginfoUpgrade php-pecl-apcu-debugsourceUpgrade php-jsonUpgrade php-enchantUpgrade php-pecl-rrdUpgrade php-soap-debuginfoUpgrade php-snmp-debuginfoUpgrade php-mbstringUpgrade libzip-develUpgrade php-pecl-redis6-debuginfoUpgrade php-ldap-debuginfoUpgrade php-gdUpgrade php-xmlrpcUpgrade php-pecl-apcu-debuginfoUpgrade php-fpm-debuginfoUpgrade php-intl-debuginfoUpgrade php-pecl-rrd-debugsourceUpgrade php-pecl-rrd-debuginfoUpgrade php-opcache-debuginfoUpgrade php-pgsql-debuginfoUpgrade php-pecl-redis6-debugsourceUpgrade php-pdo-debuginfoUpgrade php-dbg-debuginfoUpgrade libzip-tools-debuginfoUpgrade php-ffiUpgrade php-debuginfoUpgrade php-cli-debuginfoUpgrade libzip-toolsUpgrade php-mysqlnd-debuginfoUpgrade php-process-debuginfoUpgrade php-dbaUpgrade php-odbc-debuginfoUpgrade php-opcacheUpgrade php-intlUpgrade php-embedded-debuginfoUpgrade php-bcmath-debuginfoUpgrade libzip-debugsourceUpgrade php-processUpgrade php-pecl-apcu-develUpgrade php-soap | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade php7-exifUpgrade php8-opensslUpgrade php7-fastcgiUpgrade php7-intlUpgrade php8-tokenizerUpgrade php7-domUpgrade php8-mysqlUpgrade php8-ftpUpgrade php8-fileinfoUpgrade php8-develUpgrade php7-gdUpgrade php7-xmlreaderUpgrade php7-xslUpgrade php7-opensslUpgrade php8-cliUpgrade php7-xmlwriterUpgrade php7-sodiumUpgrade php7-curlUpgrade php8-sodiumUpgrade php8-fastcgiUpgrade php7-snmpUpgrade php8-dbaUpgrade php8-snmpUpgrade php8-sysvmsgUpgrade php7-pcntlUpgrade php7-sysvsemUpgrade php8-sysvshmUpgrade php7-iconvUpgrade php8-mbstringUpgrade php7-opcacheUpgrade php7-gmpUpgrade php8-posixUpgrade php8-tidyUpgrade php8-socketsUpgrade php7-ctypeUpgrade php7-tidyUpgrade php8-iconvUpgrade php8-xmlreaderUpgrade php8-embedUpgrade php8-xslUpgrade php7-fpmUpgrade php8-zipUpgrade php8-zlibUpgrade php8-pcntlUpgrade php7-enchantUpgrade php7-embedUpgrade php8-exifUpgrade php7-fileinfoUpgrade php8-sysvsemUpgrade php7-ftpUpgrade php7-pdoUpgrade php7-calendarUpgrade php7-ldapUpgrade php7-readlineUpgrade php8-pgsqlUpgrade php8-bz2Upgrade php8Upgrade php7-tokenizerUpgrade php8-odbcUpgrade php8-fpm-apacheUpgrade php8-readlineUpgrade php7-bz2Upgrade php7-shmopUpgrade php8-pharUpgrade php8-ffiUpgrade php7-sqliteUpgrade php7-posixUpgrade php7-gettextUpgrade php7-xmlrpcUpgrade php8-soapUpgrade php8-shmopUpgrade php8-opcacheUpgrade php8-gdUpgrade php7-testUpgrade php8-testUpgrade php8-bcmathUpgrade apache2-mod_php8Upgrade php8-sqliteUpgrade php8-calendarUpgrade php7-cliUpgrade php7-zlibUpgrade php8-enchantUpgrade php7-socketsUpgrade php7-dbaUpgrade php8-domUpgrade php8-gmpUpgrade php7-sysvshmUpgrade php7-jsonUpgrade php7-develUpgrade php7Upgrade php8-ldapUpgrade php7-odbcUpgrade php7-mbstringUpgrade php8-xmlwriterUpgrade php7-zipUpgrade php7-sysvmsgUpgrade php8-intlUpgrade php7-pgsqlUpgrade php7-mysqlUpgrade apache2-mod_php7Upgrade php8-pdoUpgrade php8-ctypeUpgrade php8-fpmUpgrade php8-curlUpgrade php8-gettextUpgrade php7-soapUpgrade php7-pharUpgrade php7-bcmath | Mar 25, 2025 | Mar 24, 2025 |
| Ubuntu | — | Upgrade php8.1-cgiUpgrade libapache2-mod-php8.3Upgrade php8.1Upgrade php8.3-cgiUpgrade php7.4-cliUpgrade php8.1-cliUpgrade php7.4-fpmUpgrade php8.3Upgrade php8.3-cliUpgrade libapache2-mod-php8.1Upgrade php7.4Upgrade php8.1-fpmUpgrade php8.3-fpmUpgrade php7.4-cgiUpgrade libapache2-mod-php8.0Upgrade libapache2-mod-php7.4 | Apr 1, 2025 | Mar 30, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub