CVE-2015-3257
CVE-2015-3257
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.
CVSS 6.1 · Medium · EPSS 0.9% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
zendframework/zend-diactoros Packagist
- Versions
- 1.0.0
- 1.0.1
- 1.0.2
- 1.0.3
- Affected ranges
- ECOSYSTEM: ≥ 1.0.0, < 1.0.4
Update to 1.0.4