{"action":"Upgrade zendframework/zendframework to 2.2.10 or later.","affected":[{"fixed":"2.2.10","introduced":"0"},{"fixed":"2.3.5","introduced":"2.3.0"}],"component":"zendframework/zendframework","cve_ids":["CVE-2015-0270"],"ecosystem":"Packagist","epss":0.01103,"exploited":false,"fixed_versions":["2.2.10","2.3.5"],"ghsa_id":"GHSA-v59p-p692-v382","id":"tcs_01M5KF8TMCSGJK322XRARYV225","modified_at":"2024-02-16T08:13:05.832676Z","published_at":"2022-05-24T16:59:51Z","references":["https://osv.dev/vulnerability/GHSA-v59p-p692-v382","https://nvd.nist.gov/vuln/detail/CVE-2015-0270","https://github.com/zendframework/zendframework/commit/569f18228f5fc84534af6ff2f367ca1a7143ec65","https://framework.zend.com/security/advisory/ZF2015-02","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-db/CVE-2015-0270.yaml","https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/CVE-2015-0270.yaml","https://github.com/zendframework/zendframework"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v59p-p692-v382","url":"https://osv.dev/vulnerability/GHSA-v59p-p692-v382"}],"summary":"Zend Framework Allows SQL Injection"}