Vulnerability in Zend Zend_framework
CVE-2014-2682
Zend Framework 1 (ZF1) before 1.12.4, Zend Framework 2 before 2.1.6 and 2.2.x before 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzur…
EPSS: 0.018 (83.3th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- [oss-security] 20140331 CVE requests: Zend Framework issues fixed in ZF2014-01 and ZF2014-02 (mailing-list, x_refsource_MLIST, Mailing List, Third Party Advisory)
- MDVSA-2014:072 (vendor-advisory, Third Party Advisory, x_refsource_MANDRIVA)
- cve@mitre.org (x_refsource_CONFIRM, Third Party Advisory)
- 66358 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)
- DSA-3265 (vendor-advisory, Third Party Advisory, x_refsource_DEBIAN)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)