Getlaminas Laminas-Http vulnerabilities

1 known vulnerability affecting getlaminas/laminas-http.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2021-3007CRITICALCVSS 9.8ExploitedPoCfixed in 2.14.22021-01-04

CVE-2021-3007 [CRITICAL] CWE-502 CVE-2021-3007: Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerab Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer supported by the maintainer. NOTE: the laminas-http v