Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47753

HistoryJun 26, 2024 - 7:07 a.m.

URL Rewrite

2024-06-2607:07:28

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

zend-diactoros

url rewrite

vulnerability

http headers introspection

arbitrary content

7.1 High

AI Score

Confidence

High

zendframework/zend-diactoros is vulnerable to URL Rewrite. The vulnerability is due to marshaling a request URI that includes logic to introspect HTTP request headers specific to a server-side URL rewrite mechanism. The attacker can emulate these headers to request arbitrary content.

7.1 High

AI Score

Confidence

High