CVE-2009-4417

2022-10-0316:24:05

mitre

www.cve.org

zend framework

security vulnerability

email vectors

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.8%

JSON

The shutdown function in the Zend_Log_Writer_Mail class in Zend Framework (ZF) allows context-dependent attackers to send arbitrary e-mail messages to any recipient address via vectors related to “events not yet mailed.”

References

www.sektioneins.de/en/advisories/advisory-032009-piwik-cookie-unserialize-vulnerability/

www.suspekt.org/2009/12/09/advisory-032009-piwik-cookie-unserialize-vulnerability/