CVE-2024-8925

score

<0.1

cvss

3.1

epss

0.9%

published

2024-10-08

kev added

—

first seen

2026-10-21

PHP 8.1.* before 8.1.30, 8.2.* before 8.2.24, 8.3.* before 8.3.12 contain an issue with multipart form data parsing caused by erroneous parsing, letting attackers exclude parts of submitted data, exploit requires sending malicious multipart data.