CVE-2024-11234

In PHP versions 8.1.* before 8.1.31, 8.2.* before 8.2.26, 8.3.* before 8.3.14, when using streams with configured proxy and "request_fulluri" option, the URI is not properly sanitized which can lead to HTTP request smuggling and allow the attacker to use the proxy to perform arbitrary HTTP requests originating from the server, thus potentially gaining access to resources not normally available to the external user.

CVSS v3.1

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

CVSS v3.1

4.8 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS

1.11% chance of exploitation in the next 30 days, 64th percentile

Published

2024-11-24

Updated

2025-11-03

Proof-of-concept exploits (1)

• php/php-src/security/advisories/GHSA-c5f2-jwm7-mmq2

References

• CVE Record
• NVD entry

Related

• CVE-2014-0185
• CVE-2023-0567
• CVE-2023-3823
• CVE-2023-3824
• CVE-2024-11233
• CVE-2024-11235