{"action":"Upgrade laminas/laminas-http to 2.14.2 or later.","affected":[{"fixed":"2.14.2","introduced":"0"}],"component":"laminas/laminas-http","cve_ids":["CVE-2021-3007"],"ecosystem":"Packagist","epss":0.75313,"exploited":false,"fixed_versions":["2.14.2"],"ghsa_id":"GHSA-xx8f-qf9f-5fgw","id":"tcs_01M5KFBF8Q8SEFP2XKD5R2ZD87","modified_at":"2024-04-22T19:34:11.085249Z","published_at":"2021-06-08T20:11:19Z","references":["https://osv.dev/vulnerability/GHSA-xx8f-qf9f-5fgw","https://nvd.nist.gov/vuln/detail/CVE-2021-3007","https://github.com/laminas/laminas-http/pull/48","https://github.com/Ling-Yizhou/zendframework3-/blob/main/zend%20framework3%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%20rce.md","https://github.com/laminas/laminas-http/commits/2.15.x/src/Response/Stream.php","https://github.com/laminas/laminas-http/releases/tag/2.14.2","https://research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-xx8f-qf9f-5fgw#Packagist/laminas/laminas-http","url":"https://osv.dev/vulnerability/GHSA-xx8f-qf9f-5fgw"}],"summary":"Remote code execution in zendframework and laminas-http"}