PT-2024-40431 · Zend Framework · Zend-Developer-Tools

Published 2024-06-07 · Updated 2024-06-07

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions zendframework/zend-developer-tools (affected versions not specified)

Description The zendframework/zend-developer-tools package provides a web-based toolbar for application introspection. A change made to support PHP 7.3 could potentially prevent default-enabled toolbar entries from being disabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

GHSA-QG7M-MWXM-J3H7

Affected Products

Zend-Developer-Tools

References · 5

• https://osv.dev/vulnerability/GHSA-qg7m-mwxm-j3h7 · Vendor Advisory
• https://github.com/FriendsOfPHP/security-advisories/blob/master/zendframework/zend-developer-tools/ZF2019-01.yaml · Note
• https://github.com/zendframework/zend-developer-tools · Note
• https://github.com/zendframework/zend-developer-tools/commit/ce27f4624cf947bea2d746244b1ed6de10e22f1f · Note
• https://framework.zend.com/security/advisory/ZF2019-01 · Note