| Assigner | mitre |
| Reserved | 2020-11-27 |
| Published | 2023-04-04 |
| Updated | 2024-05-15 |
Description
An issue found in Zend Framework v.3.1.3 and before allow a remote attacker to execute arbitrary code via the unserialize function. Note: This has been disputed by third parties as incomplete and incorrect. The framework does not have a version that surpasses 2.x.x and was deprecated in early 2020.
References
https://cowtransfer.com/s/f9684f004d7149
https://github.com/zendframework/zendframework
