Lucene search
Veracode Vulnerability DatabaseVERACODE:47649HistoryJun 19, 2024 - 10:32 a.m.
Cross-site Request Forgery (CSRF)
2024-06-1910:32:42
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
2
zend-feed
vulnerability
software
csrf
7.2 High
AI Score
Confidence
High
zendframework/zend-feed is vulnerable to Cross-site Request Forgery (CSRF). The vulnerability is due to the request URI marshalling logic that introspects specific HTTP request headers, allowing a malicious client or proxy to emulate these headers and request arbitrary content.
7.2 High
AI Score
Confidence
High