CVE-2015-1786

Published: 08 June 2017

Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or malformed token identifiers.

Priority

CVSS 3 base score: 8.8

Status

Package	Release	Status
zendframework Launchpad, Ubuntu, Debian	Upstream	Released (2.3.6)






	Ubuntu 14.04 ESM (Trusty Tahr)	Does not exist

Author	Note
seth-arnold	this issue was introduced in 2.3.

Canonical is offering Ubuntu Extended Security Maintenance (ESM) for security fixes and essential packages.