Vulnerabilities > Zend > Diactoros > Medium
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2017-08-25 | CVE-2015-3257 | Cross-site Scripting vulnerability in Zend Diactoros Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks. | 4.3 |