Design/Logic Flaw

2023-04-0415:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

remote code execution

zend framework

unserialize function

nvd

9.6 High

AI Score

Confidence

High

0.009 Low

EPSS

Percentile

83.2%

An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function.

CPENameOperatorVersion
zend_frameworkle3.1.3

CPE	Name	Operator	Version
	zend_framework	le	3.1.3

References

zend.com

cowtransfer.com/s/f9684f004d7149

github.com/zendframework/zendframework