CVE-2014-4913 ZF2014-03 has a potential cross site scripting vector in multiple view helpers
MediumCVSS 6.1
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ZF2014-03 has a potential cross site scripting vector in multiple view helpers
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zend framework | < 2.2.7 | 2.2.7 |
| zend framework | >= 2.3.0, < 2.3.1 | 2.3.1 |
| debian linux | = 8.0 | No fix listed |
| zendframework/zendframework | = Fixed: Zend Framework 2.2.7 | No fix listed |
| zendframework/zendframework | = Zend Framework 2.3.1 | No fix listed |
References
- www.openwall.com mailing-list third-party-advisory
- www.securityfocus.com third-party-advisory vdb-entry
- access.redhat.com broken-link
- framework.zend.com vendor-advisory
- security-tracker.debian.org third-party-advisory