Skip to content
OpenAdvisories

Package · Packagist

zendframework/zend-diactoros

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.7
    GHSA-fq4p-86hh-42v9

    Zend-Diactoros URL Rewrite vulnerability

    zend-diactoros (and, by extension, Expressive), zend-http (and, by extension, Zend Framework MVC projects), and zend-feed (specifically, its PubSubHubbub sub-component) each contain a potential URL rewrite exploit. In each case, marshaling a request URI inclu…

    zendframework/zend-diactoros Packagist
  • Medium 6.1
    CVE-2015-3257

    zend-diactoros Cross-site Scripting (XSS)

    Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.

    zendframework/zend-diactoros Packagist