In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when parsing HTTP redirect in the response to an HTTP request, there is currently limit on the location value size caused by limited size of the location buffer to 1024. However as per RFC9110, the limit is recommended to be 8000. This may lead to incorrect URL truncation and redirecting to a wrong location.
References
| Link | Resource |
|---|---|
| https://github.com/php/php-src/security/advisories/GHSA-52jp-hrpf-2jff | Vendor Advisory |
| https://security.netapp.com/advisory/ntap-20250523-0005/ | Third Party Advisory |
Configurations
History
02 Jul 2025, 20:17
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Php
Php php Netapp ontap Netapp |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| CPE | cpe:2.3:a:php:php:*:*:*:*:*:*:*:* cpe:2.3:a:netapp:ontap:9:*:*:*:*:*:*:* |
|
| References | () https://github.com/php/php-src/security/advisories/GHSA-52jp-hrpf-2jff - Vendor Advisory | |
| References | () https://security.netapp.com/advisory/ntap-20250523-0005/ - Third Party Advisory |
23 May 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Mar 2025, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-30 06:15
Updated : 2025-07-02 20:17
NVD link : CVE-2025-1861
Mitre link : CVE-2025-1861
JSON object : View
Products Affected
php
- php
netapp
- ontap
CWE
No CWE.