Packagist/zendframework/zendframework CVE-2015-0270: critical 9.8, EPSS 1.10%

Zend Framework Allows SQL Injection

Action: Upgrade zendframework/zendframework to 2.2.10 or later.

composer require zendframework/zendframework:2.2.10

composer require zendframework/zendframework:2.3.5

Affected

Fixed versions

Sources

• osv: GHSA-v59p-p692-v382
• https://nvd.nist.gov/vuln/detail/CVE-2015-0270
• https://github.com/zendframework/zendframework/commit/569f18228f5fc84534af6ff2f367ca1a7143ec65
• https://framework.zend.com/security/advisory/ZF2015-02
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-db/CVE-2015-0270.yaml
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/CVE-2015-0270.yaml
• https://github.com/zendframework/zendframework

CVE-2015-0270 · published 2022-05-24T16:59:51Z · modified 2024-02-16T08:13:05.832676Z · JSON