Skip to content
OpenAdvisories
Critical · 9.8 CVE-2015-0270 EUVD-2022-5285GHSA-v59p-p692-v382

Zend Framework Allows SQL Injection

Published Oct 25, 2019 · Updated Aug 6, 2024 · Assigned by redhat

Vendor: Zend Product: Zend Framework Package: zendframework/zend-db Package: zendframework/zendframework Ecosystem: Packagist

Description

Zend Framework before 2.2.10 and 2.3.x before 2.3.5 has Potential SQL injection in PostgreSQL Zend\Db adapter.

Affected products

VendorProductAffectedFixed
Zend Zend Framework before 2.2.10 and 2.3.x before 2.3.5 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist zendframework/zend-db < 2.2.10 2.2.10 GHSA-v59p-p692-v382
Packagist zendframework/zend-db >= 2.3.0, < 2.3.5 2.3.5 GHSA-v59p-p692-v382
Packagist zendframework/zendframework < 2.2.10 2.2.10 GHSA-v59p-p692-v382
Packagist zendframework/zendframework >= 2.3.0, < 2.3.5 2.3.5 GHSA-v59p-p692-v382

References