Packagist/zendframework/zendframework CVE-2015-3154: medium 6.1, EPSS 1.01%

Zenario CMS vulnerable to CRLF injection

Action: Upgrade zendframework/zendframework to 2.3.8 or later.

composer require zendframework/zendframework:2.3.8

composer require zendframework/zendframework:2.4.1

Affected

Fixed versions

Sources

• osv: GHSA-5957-5crx-79jx#Packagist/zendframework/zendframework
• https://nvd.nist.gov/vuln/detail/CVE-2015-3154
• https://framework.zend.com/security/advisory/ZF2015-04
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-http/CVE-2015-3154.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/CVE-2015-3154.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/CVE-2015-3154.yaml
• https://github.com/zendframework/zendframework

CVE-2015-3154 · published 2022-05-24T17:07:24Z · modified 2024-02-16T07:58:34.368385Z · JSON