AZL-59315
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-59315.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-59315
- Upstream
- Published
- 2025-03-30T06:15:14Z
- Modified
- 2026-04-01T05:19:28.157957Z
- Summary
- CVE-2025-1734 affecting package php for versions less than 8.1.32-1
- Details
-
In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers.
- References