CVE-2022-31109

Packagist/laminas/laminas-diactoros CVE-2022-31109: medium 6.1

Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack

Action: Upgrade laminas/laminas-diactoros to 2.11.1 or later.

composer require laminas/laminas-diactoros:2.11.1

Affected

Fixed versions

Sources

• osv: GHSA-8274-h5jp-97vr
• https://github.com/laminas/laminas-diactoros/security/advisories/GHSA-8274-h5jp-97vr
• https://nvd.nist.gov/vuln/detail/CVE-2022-31109
• https://github.com/laminas/laminas-diactoros/commit/25b11d422c2e5dad868f68619888763b30f91e2d
• https://github.com/FriendsOfPHP/security-advisories/blob/master/laminas/laminas-diactoros/CVE-2022-31109.yaml
• https://github.com/advisories/GHSA-8274-h5jp-97vr
• https://github.com/laminas/laminas-diactoros
• https://github.com/laminas/laminas-diactoros/releases/tag/2.11.1
• https://portswigger.net/web-security/host-header

CVE-2022-31109 · published 2022-07-27T22:05:18Z · modified 2023-11-08T04:09:26.511397Z · JSON