Lucene search

K
osvGoogleOSV:GHSA-RH3C-7WQX-6W95
HistoryMay 17, 2022 - 1:22 a.m.

zend-diactoros Cross-site Scripting (XSS)

2022-05-1701:22:50
Google
osv.dev
5
security vulnerability
cross-site scripting
open redirect
remote attack

AI Score

6

Confidence

High

EPSS

0.001

Percentile

41.1%

Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

41.1%

Related for OSV:GHSA-RH3C-7WQX-6W95