Skip to content
OpenAdvisories

Package · Packagist

zendesk/zendesk_api_client_php

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical —
    CVE-2021-30492

    Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain

    ### Impact Lack of input validation of the Zendesk subdomain could expose users of the library to Server Side Request Forgery (SSRF). ### Resolution Validate the provided Zendesk subdomain to be a valid subdomain in: * getAuthUrl * getAccessToken

    zendesk/zendesk_api_client_php Packagist