PT-2024-40371 · Unknown · Zend Framework

Published 2024-06-07 · Updated 2024-06-07

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Zend Framework (affected versions not specified)

Description The issue concerns improper parsing of HTTP headers for proxy information in certain Zend Framework components. Specifically, ZendSessionValidatorRemoteAddr and ZendViewHelperServerUrl were found to have flaws. The ZendSessionValidatorRemoteAddr component incorrectly detects the proxy URL when a client is behind a proxy server, leading to potential invalid results. The ZendViewHelperServerUrl component generates URLs based on the proxy host without considering whether this is desired, and it also fails to account for the proxy port or protocol.

Recommendations For versions of Zend Framework that include the vulnerable ZendSessionValidatorRemoteAddr and ZendViewHelperServerUrl components, consider the following:

• As a temporary workaround, restrict the use of the ZendSessionValidatorRemoteAddr and ZendViewHelperServerUrl classes until a patch is available.
• Avoid using the ZendViewHelperServerUrl helper to generate URLs when the server is behind a proxy, until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

GHSA-MG7H-9QFX-4R83

Affected Products

Zend Framework

References · 10

• https://osv.dev/vulnerability/GHSA-mg7h-9qfx-4r83 · Vendor Advisory
• https://github.com/zendframework/zendframework/commit/ad8fdc3378710b7cfbe2a271dbb0e3256cffb599 · Note
• https://github.com/zendframework/zendframework/commit/1040acaf70d297ec7214934d8ddc3e811d249b5c · Note
• https://github.com/zendframework/zendframework/commit/ada1fab92f6d5c7ad96c5a63f3196d925e3f5887 · Note
• https://github.com/zendframework/zendframework/commit/c3819abbf2c9571069c893d27ae6170bda413925 · Note
• https://github.com/zendframework/zendframework/commit/b914ecdd4d17ab5b61f15ccdc02a6e9b255b15d8 · Note
• https://github.com/zendframework/zendframework/commit/cfaf5ea095c93f3e70343358a3a88c3924d7ed7d · Note
• https://github.com/zendframework/zendframework · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zendframework/ZF2012-04.yaml · Note
• https://framework.zend.com/security/advisory/ZF2012-04 · Note