Lucene search
Veracode Vulnerability DatabaseVERACODE:4409HistoryJun 09, 2017 - 2:01 a.m.
Cross-Site Request Forgery (CSRF)
2017-06-0902:01:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
30.8%
zendframework is vulnerable to cross-site request forgery (CSRF). The library does not correctly identify null or mal-formed token identifiers, causing them to be falsely identified as valid tokens. This can allow a malicious user to use this as a vector for cross-site request forgery (CSRF).
Related
prion
prion
Cross site request forgery (csrf)
2017-06-08 21:29:00
ubuntucve
ubuntucve
CVE-2015-1786
2017-06-08 00:00:00
cve
cve
CVE-2015-1786
2017-06-08 21:29:00
friendsofphp
friendsofphp
Invalid CSRF validation of null or incorrectly formatted token identifiers
2015-03-12 13:58:47
Invalid CSRF validation of null or incorrectly formatted token identifiers
2015-03-12 13:58:47
osv
osv
Zend Framework CSRF Vulnerability
2022-05-17 02:41:23
nvd
nvd
CVE-2015-1786
2017-06-08 21:29:00
cvelist
cvelist
CVE-2015-1786
2017-06-08 21:00:00
github
github
Zend Framework CSRF Vulnerability
2022-05-17 02:41:23