URL Rewrite

zendframework/zend-feed is vulnerable to URL Rewrite. The vulnerability is due to marshaling a request URI that includes logic to introspect HTTP request headers specific to a server-side URL rewrite mechanism. The attacker can emulate these headers to request arbitrary content...

Cross-site Request Forgery (CSRF)

zendframework/zend-feed is vulnerable to Cross-site Request Forgery CSRF. The vulnerability is due to the request URI marshalling logic that introspects specific HTTP request headers, allowing a malicious client or proxy to emulate these headers and request arbitrary content...

Zend-Diactoros URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-JMMP-VH96-78RM Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

Zend-Feed URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

GHSA-CG8W-5JRC-675G Zend-HTTP URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

Zend-HTTP URL Rewrite vulnerability

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

PT-2024-40349

Name of the Vulnerable Software and Affected Versions zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description The issue concerns a potential URL rewrite exploit in the mentioned software components. It involves...

PT-2024-40276

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It involv...

PT-2024-40271

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It involv...

PT-2024-40074

Name of the Vulnerable Software and Affected Versions: Zend Framework versions prior to 1.11.13 and 1.12.0 Description: The issue concerns the insecure usage of PHP's DOM extension in Zend Feed Rss and Zend Feed Atom, allowing for potential XML eXternal Entity XXE vectors. This could be exploited...

PT-2024-40246

Name of the Vulnerable Software and Affected Versions: zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description: The issue concerns a potential URL rewrite exploit in the mentioned software components. It allows...

PT-2024-40028

Name of the Vulnerable Software and Affected Versions Zend Dom, Zend Feed, Zend Soap, and Zend XmlRpc affected versions not specified Description The issue concerns XML Entity Expansion XEE vectors, which can lead to Denial of Service attacks. XEE attacks happen when the XML DOCTYPE declaration...

URL Rewrite vulnerability in multiple zendframework components

zend-diactoros and, by extension, Expressive, zend-http and, by extension, Zend Framework MVC projects, and zend-feed specifically, its PubSubHubbub sub-component each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request...

PT-2022-28239

Name of the Vulnerable Software and Affected Versions zend-diactoros affected versions not specified zend-http affected versions not specified zend-feed affected versions not specified Description The issue concerns a potential URL rewrite exploit in the mentioned software components. It involves...

Fedora Update for php-zendframework-zend-feed FEDORA-2018-7da5983771

The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Drupal Core Multiple Security Vulnerabilities (SA-CORE-2018-005) - Linux

Drupal is prone to multiple security vulnerabilities. Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Drupal Core - 3rd-party libraries -SA-CORE-2018-005

The Drupal project uses the Symfony library. The Symfony library has released a security update that impacts Drupal. Refer to the Symfony security advisory for the issue. The same vulnerability also exists in the Zend Feed and Diactoros libraries included in Drupal core; however, Drupal core does...

PT-2013-1828

Name of the Vulnerable Software and Affected Versions Zend Framework versions 1.11.x through 1.11.14 Zend Framework versions 1.12.x through 1.12.0 Description The issue allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, and possibly cause a denial of service...

UBUNTU-CVE-2012-6532

1 ZendDom, 2 ZendFeed, 3 ZendSoap, and 4 ZendXmlRpc in Zend Framework 1.x before 1.11.13 and 1.12.x before 1.12.0 allow remote attackers to cause a denial of service CPU consumption via recursive or circular references in an XML entity definition in an XML DOCTYPE declaration, aka an XML Entity...