GHSA-w5mj-j45q-m638
GHSA-w5mj-j45q-m638 · ZendFramework1 Potential Security Issues in Bundled Dojo Library
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
In mid-March, 2010, the Dojo Foundation issued a Security Advisory indicating potential security issues with specific files in Dojo Toolkit. Details of the advisory may be found on the Dojo website: http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory/ In particular, several files in the Dojo tree were identified as having potential exploits, and the Dojo team also advised disabling or removing any PHP scripts in the tree when deploying to production.
Corrección disponible
- Publicación
- Actualización
Pila tecnológica: php
Productos y versiones afectados
zendframework/zendframework1 Packagist
- Intervalos de versiones afectados
- ECOSYSTEM: ≥ 1.9.0, < 1.9.8
Actualiza a 1.9.8
zendframework/zendframework1 Packagist
- Intervalos de versiones afectados
- ECOSYSTEM: ≥ 1.10.0, < 1.10.3
Actualiza a 1.10.3
Fuentes originales
- https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2010-07.yaml
- https://github.com/zendframework/zf1
- https://web.archive.org/web/20210509072723/https://framework.zend.com/security/advisory/ZF2010-07
- http://dojotoolkit.org/blog/post/dylan/2010/03/dojo-security-advisory
- https://osv.dev/vulnerability/GHSA-w5mj-j45q-m638