CVE-2015-3257

The CVE-2015-3257 entry affects Zend/Diactoros (Uri::filterPath) prior to version 1.0.4. The root cause is improper sanitization of path input, enabling remote attackers to perform cross-site scripting (XSS) or open redirects. The impact is client-facing URL parsing vulnerabilities that could lea...