Zend Framework 2.4.10

CPE Details

Zend Framework 2.4.10
zend
zend_framework
2.4.10
2019-06-18
17h17 +00:00
2019-06-18
17h17 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:zend:zend_framework:2.4.10:*:*:*:*:*:*:*

Informations

Vendor

zend

Product

zend_framework

Version

2.4.10

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-29312 2023-04-04 00h00 +00:00 An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020.
9.8
Critique
CVE-2016-10034 2016-12-30 18h00 +00:00 The setFrom function in the Sendmail adapter in the zend-mail component before 2.4.11, 2.5.x, 2.6.x, and 2.7.x before 2.7.2, and Zend Framework before 2.4.11 might allow remote attackers to pass extra parameters to the mail command and consequently execute arbitrary code via a \" (backslash double quote) in a crafted e-mail address.
9.8
Critique