CVE-2025-7381 Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images
Attackers can fingerprint the server by reading the PHP version from the X-Powered-By header in Mautic Docker images.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-7381?
CVE-2025-7381 is a medium-severity vulnerability in Docker Mautic, published on 9 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
ImpactThis is an information disclosure vulnerability originating from PHP's base image. This vulnerability exposes the PHP version through an X-Powered-By header, which attackers could exploit to fingerprint the server and identify potential weaknesses.
WorkaroundsThe mitigation requires changing the expose_php variable from "On" to "Off" in the file located at /usr/local/etc/php/php.ini.
Weakness: CWE-497
Which versions are affected by CVE-2025-7381?
How do I fix CVE-2025-7381?
No fix has been published for CVE-2025-7381 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-7381 being exploited?
There is no known exploitation of CVE-2025-7381 in the wild and no public exploit code.