CVE-2025-1220

CWE-918 — Server-Side Request Forgery (SSRF)CWE-1220CWE-200 — Information ExposureCWE-863 — Incorrect AuthorizationCWE-79 — Cross-site Scripting (XSS)30 documents9 sources
Severity
5.3MEDIUM
EPSS
0.1%
top 84.19%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
PHP Group PHPPHP PHP
Timeline
PublishedJul 13
Latest updateMar 16

Description

In PHP versions:8.1.* before 8.1.33, 8.2.* before 8.2.29, 8.3.* before 8.3.23, 8.4.* before 8.4.10 some functions like fsockopen() lack validation that the hostname supplied does not contain null characters. This may lead to other functions like parse_url() treat the hostname in different way, thus opening way to security problems if the user code implements access checks before access using such functions.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 2.2 | Impact: 1.4

Affected Packages10 packages

▶NVDphp/php8.1.0 — 8.1.33+3
▶CVEListV5php_group/php8.1.* — 8.1.33+3
▶Debianphp7.4< 7.4.33-1+deb11u9
▶Debianphp8.2< 8.2.29-1~deb12u1
▶Debianphp8.4< 8.4.10-1+1

🔴Vulnerability Details

5
OSV
php7.0, php7.2, php7.4 regression↗2025-09-04
▶
OSV
php7.0, php7.2, php7.4 vulnerabilities↗2025-08-21
▶
OSV
php8.1, php8.3, php8.4 vulnerabilities↗2025-07-17
▶
OSV
CVE-2025-1220: In PHP versions:8↗2025-07-13
▶
CVEList
Null byte termination in hostnames↗2025-07-13
▶

📋Vendor Advisories

21
Red Hat
fastmcp: FastMCP: Improper token issuance due to incorrect resource parameter handling↗2026-03-16
▶
Red Hat
Intel (R): From CVEorg collector↗2026-02-10
▶
GitLab
CVE-2025-11246: GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.4 before 18.5.5, 18.6 before 18.6.3, and 18.7 before 18.7.1 that could h↗2026-01-09
▶
Red Hat
Apptainer: Apptainer: Security bypass due to disabling security options↗2025-12-02
▶
Cisco
Cisco Identity Services Engine Reflected Cross-Site Scripting and Information Disclosure Vulnerabilities↗2025-11-05
▶