Security advisories

high2024-06-07

ZendFramework local file inclusion vector in `Zend_View::setScriptPath()` and `render()`

zendframework/zf1 · GHSA-hx3m-959f-v849

medium2024-06-07

ZendFramework has potential Cross-site Scripting vector in multiple view helpers

zendframework/zend-view · GHSA-m7hr-j867-3f34

medium2024-06-07

Zendframework URL Rewrite vulnerability

zendframework/zendframework · GHSA-fh7r-58q4-6387

medium2024-06-07

ZendFramework vulnerable to Cross-site Scripting

zendframework/zendframework · GHSA-5gmf-3c43-q73v

medium2024-06-07

ZendFramework potential remote code execution in zend-mail via Sendmail adapter

zendframework/zendframework · GHSA-gff2-p6vm-3p8g

medium2024-06-07

ZendFramework Potential Proxy Injection Vulnerabilities

zendframework/zendframework · GHSA-mg7h-9qfx-4r83

medium2024-06-07

ZendFramework Information Disclosure and Insufficient Entropy vulnerability

zendframework/zendframework · GHSA-2fhr-8r8r-qp56

high2024-06-07

ZendFramework SQL injection due to execution of platform-specific SQL containing interpolations

zendframework/zendframework · GHSA-x2f4-8wxf-w3vf

critical2024-06-07

Zendframework vulnerable to XXE/XEE attacks

zendframework/zendframework · GHSA-qc7w-4567-84wv

high2024-06-07

ZendFramework Potential Information Disclosure and Insufficient Entropy vulnerabilities

zendframework/zendframework · GHSA-xg9w-r469-m455

medium2024-06-07

Zendframework session validation vulnerability

zendframework/zendframework · GHSA-62f6-h68r-3jpw

high2024-06-07

ZendFramework Route Parameter Injection Via Query String in `Zend\Mvc`

zendframework/zendframework · GHSA-jq87-2wxp-8349

medium2024-06-07

Zendframework has potential Cross-site Scripting vector in multiple view helpers

zendframework/zendframework · GHSA-8q77-cv62-jj38

high2024-06-07

Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`

zendframework/zendframework · GHSA-xffp-6w68-4775

medium2024-06-07

TYPO3 Denial of Service in Online Media Asset Handling

typo3/typo3 · GHSA-f3wf-q4fj-3gxf

medium2024-06-07

TYPO3 Information Disclosure in Install Tool

typo3/typo3 · GHSA-6487-3qvg-8px9

high2024-06-07

TYPO3 Security Misconfiguration in Install Tool Cookie

typo3/typo3 · GHSA-f777-f784-36gm

medium2024-06-07

TYPO3 Cross-Site Scripting in Frontend User Login

typo3/typo3 · GHSA-2rcw-9hrm-8q7q

medium2024-06-07

TYPO3 Cross-Site Scripting in Backend Modal Component

typo3/typo3 · GHSA-7q33-hxwj-7p8v

medium2024-06-07

TYPO3 Cross-Site Scripting in Online Media Asset Rendering

typo3/typo3 · GHSA-8m6j-p5jv-v69w