Skip to content
OpenAdvisories

Package · Packagist

zendframework/zendopenid

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    GHSA-3x57-m5p4-rgh4

    ZendOpenID potential security issue in login mechanism

    Using the Consumer component of ZendOpenId (or Zend_OpenId in ZF1), it is possible to login using an arbitrary OpenID account (without knowing any secret information) by using a malicious OpenID Provider. That means OpenID it is possible to login using arbitr…

    zendframework/zendopenid Packagist