REDHAT-BUG-2356043: Medium severity PHP PHP vulnerability

Published Mar 30, 2025

Updated

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when requesting a HTTP resource using the DOM or SimpleXML extensions, the wrong content-type header is used to determine the charset when the requested resource performs a redirect. This may cause the resulting document to be parsed incorrectly or bypass validations.

Affected Software

4 affected components

PHP PHP>8.1.32

PHP PHP>8.2.28

PHP PHP>8.3.19

PHP PHP>8.4.5

Event History

Mar 30, 2025

Data Sourced

via Red Hat·06:01 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2356043?

The severity of REDHAT-BUG-2356043 is considered high due to the potential impact on the proper content-type header processing during HTTP redirects.

How do I fix REDHAT-BUG-2356043?

To fix REDHAT-BUG-2356043, you should upgrade PHP to versions 8.1.32 or later, 8.2.28 or later, 8.3.19 or later, or 8.4.5 or later.

What systems are affected by REDHAT-BUG-2356043?

REDHAT-BUG-2356043 affects PHP versions prior to 8.1.32, 8.2.28, 8.3.19, and 8.4.5.

Is REDHAT-BUG-2356043 related to security vulnerabilities?

Yes, REDHAT-BUG-2356043 is related to a security vulnerability that affects how HTTP response content types are handled.

What are the consequences of not addressing REDHAT-BUG-2356043?

Failing to address REDHAT-BUG-2356043 may lead to improper handling of HTTP resources, potentially exposing sensitive data or causing application errors.