CVE-2025-43717

🗓️ 17 Apr 2025 00:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 99 Views🌐 WEB

Cross Site Scripting vulnerability in PEAR HTTP_Request2 before version 2.7.0 due to parameter reflection.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-43717	17 Apr 202503:59	–	circl
CNNVD	HTTP_Request2 安全漏洞	17 Apr 202500:00	–	cnnvd
Cvelist	CVE-2025-43717	17 Apr 202500:00	–	cvelist
EUVD	EUVD-2025-11501	3 Oct 202520:07	–	euvd
Github Security Blog	PEAR HTTP_Request2 vulnerable to Cross-site Scripting	17 Apr 202503:30	–	github
Mend	CVE-2025-43717	17 Apr 202500:00	–	mend
NVD	CVE-2025-43717	17 Apr 202503:15	–	nvd
osv_ghsa	GHSA-W7GH-F2FM-9Q8R PEAR HTTP_Request2 vulnerable to Cross-site Scripting	17 Apr 202503:30	–	osv_ghsa
Positive Technologies	PT-2025-16930 · Pear · Pear Http Request2	14 Mar 202500:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2025-43717: Inclusion of Sensitive Information in Test Code	17 Apr 202500:00	–	rapid7

Vulners

Node

http_request_project http_requestRange0–2.7.0

[
  {
    "defaultStatus": "unaffected",
    "product": "HTTP_Request2",
    "vendor": "avb",
    "versions": [
      {
        "lessThan": "2.7.0",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
github	www.github.com/pear/HTTP_Request2/compare/v2.6.0...v2.7.0
github	www.github.com/pear/HTTP_Request2/commit/265e05f9e08a28a38a57219516a8e4e2dfdbb147
github	www.github.com/pear/HTTP_Request2/commit/07925aa77e441dba0ff0fa973a09802729cb838f
github	www.github.com/pear/HTTP_Request2/blob/b1c61b71128045734d757c4d3d436457ace80ea7/package.xml

Parameter	Position	Path	Description	CWE
GET parameters	query param	/tests/_network/getparameters.php	Reflected XSS via GET parameters in the tests directory.	CWE-531
POST parameters	request body	/tests/_network/postparameters.php	Reflected XSS via POST parameters in the tests directory.	CWE-531

17 Jun 2026 09:24Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.4

EPSS0.00335

SSVC

CWE-531