Diactoros

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-3257 Aug 25, 18:29 PHP MEDIUM PATCH This Month

Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Open Redirect Diactoros Zend

NVD

CVSS 3.0

6.1

EPSS

0.2%

CVE-2015-3257 PHP

EPSS 0% CVSS 6.1

MEDIUM PATCH This Month

Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

XSS Open Redirect Diactoros +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy