Packagist/zendframework/zendservice-amazon CVE-2014-2683: medium, EPSS 2.35%

Several Zend Products Vulnerable to XXE and XEE attacks

Action: Upgrade zendframework/zendservice-amazon to 2.0.3 or later.

composer require zendframework/zendservice-amazon:2.0.3

Affected

Fixed versions

Sources

• osv: GHSA-5wm2-38q5-5rxv#Packagist/zendframework/zendservice-amazon
• https://nvd.nist.gov/vuln/detail/CVE-2014-2683
• https://web.archive.org/web/20140419041226/http://www.securityfocus.com/bid/66358
• https://web.archive.org/web/20150523055201/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2014:072/?name=MDVSA-2014:072
• http://advisories.mageia.org/MGASA-2014-0151.html
• http://framework.zend.com/security/advisory/ZF2014-01
• http://seclists.org/oss-sec/2014/q2/0
• http://www.debian.org/security/2015/dsa-3265

CVE-2014-2683 · published 2022-05-14T00:56:24Z · modified 2024-12-07T05:34:32.614029Z · JSON