-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| zendframework/zendframework1 | composer | >= 1.0.0, < 1.11.4 | 1.11.4 |
The analysis focused on identifying functions directly related to the vulnerability and the patch. The var_export function is vulnerable because it outputs user input without escaping. The escape method is part of the mitigation.