PT-2024-40335 · Zend · Zend View

Published 2024-06-07 · Updated 2024-06-07

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Zend View versions up to and including 1.7.4

Description The issue concerns a Local File Inclusion problem. If untrusted input is used to specify the script path and/or view script, a malicious attacker could potentially specify a system directory and thus render a system file. For example, if a user-supplied string like /etc/passwd or a relative path that resolves to that file is supplied to Zend View::render(), that file would be rendered. The Zend View::setScriptPath() function is implicated in this issue.

Recommendations For versions up to and including 1.7.4, ensure that only trusted input is used to specify script paths and view scripts to prevent exploitation. As a temporary workaround, consider validating and sanitizing all user-supplied input before passing it to Zend View::render() or Zend View::setScriptPath() to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

GHSA-HX3M-959F-V849

Affected Products

Zend View

References · 4

• https://osv.dev/vulnerability/GHSA-hx3m-959f-v849 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework1/ZF2009-01.yaml · Note
• https://github.com/zendframework/zf1 · Note
• https://framework.zend.com/security/advisory/ZF2009-01 · Note