Packagist/zendframework/zendframework: high 7.5
Zendframework Remote Address Spoofing Vector in `Zend\Http\PhpEnvironment\RemoteAddress`
Action: Upgrade zendframework/zendframework to 2.2.5 or later.
composer require zendframework/zendframework:2.2.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.2.0 | 2.2.5 | - |
Fixed versions
| 2.2.5 |
Sources
- osv: GHSA-xffp-6w68-4775
- https://github.com/zendframework/zendframework/commit/bb6784461d3b23ef1db4be8cf47957ccc3b681ed
- https://framework.zend.com/security/advisory/ZF2013-04
- https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2013-04.yaml
- https://github.com/zendframework/zendframework
published · modified · JSON