COOEY // HUBcompliance · community · intelligence

Exposures › CVE-2020-29312

CVE-2020-29312

Severity
critical
Source
NVD · cve
Published
2023-04-04
CVSS
9.8
Reference
https://nvd.nist.gov/vuln/detail/CVE-2020-29312
⚡ RCE shame 50/100 rce

An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprec

Players implicated

zend · vendorzend framework · product

Description

An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.