An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020.
References
| Link | Resource |
|---|---|
| http://zend.com | Product |
| https://cowtransfer.com/s/f9684f004d7149 | Broken Link |
| https://github.com/zendframework/zendframework | Product |
| http://zend.com | Product |
| https://cowtransfer.com/s/f9684f004d7149 | Broken Link |
| https://github.com/zendframework/zendframework | Product |
Configurations
History
21 Nov 2024, 05:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://zend.com - Product | |
| References | () https://cowtransfer.com/s/f9684f004d7149 - Broken Link | |
| References | () https://github.com/zendframework/zendframework - Product |
15 May 2024, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020. |
Information
Published : 2023-04-04 15:15
Updated : 2024-11-21 05:23
NVD link : CVE-2020-29312
Mitre link : CVE-2020-29312
CVE.ORG link : CVE-2020-29312
JSON object : View
Products Affected
zend
- zend_framework
CWE
CWE-502
Deserialization of Untrusted Data