Cross site scripting

2019-12-1522:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

86.2%

ZF2014-03 has a potential cross site scripting vector in multiple view helpers

CPENameOperatorVersion
debian_linuxeq8.0
zend_frameworklt2.2.7
zend_frameworkge2.3.0
zend_frameworklt2.3.1

Name	Operator	Version
debian_linux	eq	8.0
zend_framework	lt	2.2.7
zend_framework	ge	2.3.0
zend_framework	lt	2.3.1

References

www.openwall.com/lists/oss-security/2014/07/11/4

www.securityfocus.com/bid/66971

access.redhat.com/security/cve/cve-2014-4913

framework.zend.com/security/advisory/ZF2014-03

security-tracker.debian.org/tracker/CVE-2014-4913