Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:47757
HistoryJun 26, 2024 - 7:17 a.m.

URL Rewrite

2024-06-2607:17:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
url rewrite
zend-feed
vulnerability
http request
server-side

7.1 High

AI Score

Confidence

High

zendframework/zend-feed is vulnerable to URL Rewrite. The vulnerability is due to marshaling a request URI that includes logic to introspect HTTP request headers specific to a server-side URL rewrite mechanism. The attacker can emulate these headers to request arbitrary content.

7.1 High

AI Score

Confidence

High