PT-2024-40351 · Zend · Zend Framework 2

Published 2024-06-07 · Updated 2024-06-07

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zend Framework 2 (affected versions not specified)

Description The issue arises from the use of ZendMvcRouterHttpQuery in Zend Framework 2, which can lead to overriding already captured routing parameters and bypassing constraints defined in parent routes. This occurs because ZendMvcRouterHttpQuery captures any query parameters into the RouteMatch, and these parameters are merged with any parent routes. As a result, an attacker can manipulate the request URI to execute a different controller than intended, with parameter values that bypass the defined constraints.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

GHSA-JQ87-2WXP-8349

Affected Products

Zend Framework 2

References · 6

• https://osv.dev/vulnerability/GHSA-jq87-2wxp-8349 · Vendor Advisory
• https://github.com/zendframework/zendframework/commit/7fcb88ebc2d56f74aa943909f2b6b53f5c86b081 · Note
• https://github.com/zendframework/zendframework/commit/0a7ec3407f02db29ea2ffd6daa71ead6fd151cfe · Note
• https://github.com/zendframework/zendframework · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2013-01.yaml · Note
• https://framework.zend.com/security/advisory/ZF2013-01 · Note