Lucene search
Veracode Vulnerability DatabaseVERACODE:30121HistoryApr 22, 2021 - 9:11 a.m.
Remote Code Execution (RCE)
2021-04-2209:11:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
18
0.044 Low
EPSS
Percentile
92.4%
laminas/laminas-http is vulnerable to remote code execution. An attacker is able to input malicious data as it does not verify the type of the file name as string before unlinking.
| CPE | Name | Operator | Version |
|---|---|---|---|
| laminas/laminas-http | le | 2.14.1 | |
| laminas/laminas-http | le | 2.14.1 |
References
github.com/laminas/laminas-http/commits/2.15.x/src/Response/Stream.php
github.com/laminas/laminas-http/pull/48
github.com/laminas/laminas-http/releases/tag/2.14.2
github.com/Ling-Yizhou/zendframework3-/blob/main/zend%20framework3%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%20rce.md
research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet/
Related
github
github
Remote code execution in zendframework and laminas-http
2021-06-08 20:11:19
Fixes a bug in Zend Framework's Stream HTTP Wrapper
2021-04-22 16:10:49
osv
osv
Remote code execution in zendframework and laminas-http
2021-06-08 20:11:19
Fixes a bug in Zend Framework's Stream HTTP Wrapper
2021-04-22 16:10:49
CVE-2021-21426
2021-04-21 21:15:07
threatpost
threatpost
RCE 'Bug' Found and Disputed in Popular PHP Scripting Framework
2021-01-05 22:28:17
Linux Devices Under Attack by New FreakOut Malware
2021-01-19 15:51:30
checkpoint_advisories
checkpoint_advisories
Zend Framework Remote Code Execution (CVE-2021-3007)
2021-01-17 00:00:00
cvelist
cvelist
CVE-2021-3007
2021-01-04 02:26:45
CVE-2021-21426 Fixes a bug in Zend Framework's Stream HTTP Wrapper
2021-04-21 20:15:18
nvd
nvd
CVE-2021-3007
2021-01-04 03:15:13
CVE-2021-21426
2021-04-21 21:15:07
prion
prion
Deserialization of untrusted data
2021-01-04 03:15:00
Deserialization of untrusted data
2021-04-21 21:15:00
cve
cve
CVE-2021-3007
2021-01-04 03:15:13
CVE-2021-21426
2021-04-21 21:15:07
attackerkb
attackerkb
CVE-2021-3007
2021-01-04 00:00:00
CVE-2020-7961
2020-03-20 00:00:00
securelist
securelist
DDoS attacks in Q1 2021
2021-05-10 10:00:15
Cyberthreats to financial organizations in 2022
2021-11-23 10:00:13
thn
thn
FreakOut! Ongoing Botnet Attack Exploiting Recent Linux Vulnerabilities
2021-01-19 10:59:00
impervablog
impervablog
Python Cryptominer Botnet Quickly Adopts Latest Vulnerabilities
2021-01-14 17:04:59