Laminas Laminas-Http vulnerabilities

1 known vulnerability affecting laminas/laminas-http.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

Page 1 of 1

CVE-2021-3007CRITICALExploitedPoC≥ 0, < 2.14.22021-06-08

CVE-2021-3007 [CRITICAL] CWE-502 Remote code execution in zendframework and laminas-http Remote code execution in zendframework and laminas-http Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer supported by the maintainer. NOTE: the laminas-http vend