CVE-2015-3257: Cross-site Scripting

August 25, 2017 (updated August 29, 2017)

Zend/Diactoros/Uri::filterPath in zend-diactoros does not properly sanitize path input, which allows remote attackers to perform cross-site scripting (XSS) or open redirect attacks.

References

framework.zend.com/security/advisory/ZF2015-05

Detect and mitigate CVE-2015-3257 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →