CVE-2024-8925

Erroneous parsing of multipart form data

Low · published October 8, 2024

CVSS v3.1
3.1
EPSS
1%
Percentile
60.4
In the wild
Unconfirmed
What it is

In PHP versions 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12, erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed. This could lead to malicious attacker able to control part of the submitted data being able to exclude portion of other data, potentially leading to erroneous application behavior.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00935 · 60.4th percentile
Published
2024-10-08T03:35Z
EPSS history
Timeline
  • 08 OCT 03:35Z
    Erroneous parsing of multipart form data
    cvelistv5