2 matches found
Malicious code in Zendesk-Api (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain
Impact Lack of input validation of the Zendesk subdomain could expose users of the library to Server Side Request Forgery SSRF. Resolution Validate the provided Zendesk subdomain to be a valid subdomain in: getAuthUrl getAccessToken...