CVE-2020-29312: An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been…

PriorityP351critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

1.52%

71.5th percentile

An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
zend	zend_framework	<= 3.1.3	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.