CVE-2020-29312

2023-04-0400:00:00

mitre

www.cve.org

zend framework

remote code execution

unserialize function

AI Score

9.8

Confidence

High

EPSS

0.009

Percentile

82.6%

JSON

An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020.

References

zend.com

cowtransfer.com/s/f9684f004d7149

github.com/zendframework/zendframework