{"action":"Upgrade zendframework/zendframework to 2.2.9 or later.","affected":[{"fixed":"2.2.9","introduced":"2.0.0"},{"fixed":"2.3.4","introduced":"2.3.0"}],"component":"zendframework/zendframework","cve_ids":[],"ecosystem":"Packagist","exploited":false,"fixed_versions":["2.2.9","2.3.4"],"ghsa_id":"GHSA-62f6-h68r-3jpw","id":"tcs_01M5KEWHKKE9DY3DWV71SQQDXH","modified_at":"2024-12-04T05:37:06.052419Z","published_at":"2024-06-07T20:20:21Z","references":["https://osv.dev/vulnerability/GHSA-62f6-h68r-3jpw","https://github.com/zendframework/zendframework/commit/1672aee3531205e5c1a0b96d8c680124ec93db09","https://github.com/zendframework/zendframework/commit/282135561cbf98cc93274c57966b021fd6e051b9","https://github.com/zendframework/zendframework/commit/5f06a1f80a1aaeac87a46bfa9b63a5a74a14866c","https://github.com/zendframework/zendframework/commit/9493d725ef869e6ce7ab78167539223396fda491","https://github.com/zendframework/zendframework/commit/ddbf43ac3fe28fe98a4104993d0cb4bffb13a026","https://github.com/zendframework/zendframework/commit/f22a83c611732fbc0328f0f887bccc075be1fd56","https://framework.zend.com/security/advisory/ZF2015-01","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2015-01.yaml","https://github.com/zendframework/zendframework"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-62f6-h68r-3jpw","url":"https://osv.dev/vulnerability/GHSA-62f6-h68r-3jpw"}],"summary":"Zendframework session validation vulnerability"}