Junglewise Threat Intelligence
CVE-2014-2683: Several Zend Products Vulnerable to XXE and XEE attacks
CVE-2014-2683 · Severity: info · Published 2022-05-14
Technologies: zendframework/zendrest (Packagist), zendframework/zendservice-technorati (Packagist), zendframework/zendservice-audioscrobbler (Packagist), zendframework/zendservice-windowsazure (Packagist), zendframework/zendopenid (Packagist), zendframework/zendservice-nirvanix (Packagist), zendframework/zendservice-api (Packagist), zendframework/zendframework1 (Packagist), zendframework/zendservice-slideshare (Packagist), zendframework/zendservice-amazon (Packagist). Vendors: Packagist.
Executive brief
Several Zend Products Vulnerable to XXE and XEE attacks
Affected products
- Packagist zendframework/zendrest
- Packagist zendframework/zendservice-technorati
- Packagist zendframework/zendservice-audioscrobbler
- Packagist zendframework/zendservice-windowsazure
- Packagist zendframework/zendopenid
- Packagist zendframework/zendservice-nirvanix
- Packagist zendframework/zendservice-api
- Packagist zendframework/zendframework1
- Packagist zendframework/zendservice-slideshare
- Packagist zendframework/zendservice-amazon