Skip to main content

Getlaminas

3 CVEs vendor

Monthly

CVE-2023-29530 Apr 24, 20:15 PHP MEDIUM PATCH This Month

Laminas Diactoros provides PSR HTTP Message implementations. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Fedora Psr 7 Laminas Diactoros Fedoraproject +2
NVD GitHub
CVSS 3.1
6.5
EPSS
1.0%
CVE-2022-31109 Aug 01, 17:15 PHP MEDIUM PATCH This Month

laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP XSS Laminas Diactoros Getlaminas
NVD GitHub
CVSS 3.1
6.1
EPSS
0.6%
CVE-2021-3007 Jan 04, 03:15 PHP CRITICAL POC PATCH THREAT Act Now

Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP RCE Deserialization Zend Framework Laminas Http +2
NVD GitHub
CVSS 3.1
9.8
EPSS
75.3%
EPSS 1% CVSS 6.5
MEDIUM PATCH This Month

Laminas Diactoros provides PSR HTTP Message implementations. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Denial Of Service Fedora Psr 7 +4
NVD GitHub
EPSS 1% CVSS 6.1
MEDIUM PATCH This Month

laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP XSS Laminas Diactoros +1
NVD GitHub
EPSS 75% CVSS 9.8
CRITICAL POC PATCH THREAT Act Now

Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP RCE Deserialization +4
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy