CVE-2025-7381: Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images

Published Jul 9, 2025

Updated

ImpactThis is an information disclosure vulnerability originating from PHP's base image. This vulnerability exposes the PHP version through an X-Powered-By header, which attackers could exploit to fingerprint the server and identify potential weaknesses.

WorkaroundsThe mitigation requires changing the exposephp variable from "On" to "Off" in the file located at /usr/local/etc/php/php.ini.

Affected Software

2 affected components

Mautic Mautic

PHP PHP

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Configuration
In /usr/local/etc/php/php.ini, change expose_php from "On" to "Off" to prevent PHP from disclosing the PHP version via the X-Powered-By header.
PHP (php.ini) expose_php = Off

Event History

Jul 9, 2025

CVE Published

via MITRE·03:16 PM

Data Sourced

via MITRE·03:16 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeakness

Jun 28, 57578

Event

via FIRST·06:09 AM

Frequently Asked Questions

What is the severity of CVE-2025-7381?

CVE-2025-7381 is classified as an information disclosure vulnerability.

How does CVE-2025-7381 expose vulnerabilities?

CVE-2025-7381 exposes the PHP version through the X-Powered-By header, enabling attackers to fingerprint the server.

What software is affected by CVE-2025-7381?

CVE-2025-7381 affects PHP and Mautic installations.

How can I mitigate the risk of CVE-2025-7381?

To mitigate CVE-2025-7381, remove or obscure the X-Powered-By header in your server configuration.

Is CVE-2025-7381 exploitable remotely?

Yes, attackers can exploit CVE-2025-7381 remotely if the X-Powered-By header is present.