{"id":"GHSA-fh7r-58q4-6387","aliases":[],"url":"https://o3.security/vulnerability/GHSA-fh7r-58q4-6387","summary":"Zendframework URL Rewrite vulnerability","details":"zend-diactoros (and, by extension, Expressive), zend-http (and, by extension, Zend Framework MVC projects), and zend-feed (specifically, its PubSubHubbub sub-component) each contain a potential URL rewrite exploit. In each case, marshaling a request URI includes logic that introspects HTTP request headers that are specific to a given server-side URL rewrite mechanism.\n\nWhen these headers are present on systems not running the specific URL rewriting mechanism, the logic would still trigger, allowing a malicious client or proxy to emulate the headers to request arbitrary content.\n\n","published":"2024-06-07T20:55:32Z","modified":"2024-12-04T05:41:23.708118Z","cvss":{"score":4.7,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Packagist","name":"zendframework/zendframework","fixedVersion":"2.5.0"}],"fix":null,"references":[{"type":"WEB","url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2018-01.yaml"},{"type":"PACKAGE","url":"https://github.com/zendframework/zendframework"},{"type":"WEB","url":"https://web.archive.org/web/20210618220447/https://framework.zend.com/security/advisory/ZF2018-01"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2024-12-04T05:41:23.708118Z"}}