CVE-2024-9129CWE-134

Format String Injection in Zend Server

Critical · published October 22, 2024

CVSS v4.0
9.3
EPSS
0%
Percentile
35.7
In the wild
Unconfirmed
What it is

In versions of Zend Server 8.5 and prior to version 9.2 a format string injection was discovered.

Reported by Dylan Marino

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00425 · 35.7th percentile
Weakness
CWE-134 · Use of Externally-Controlled Format String
Published
2024-10-22T17:09Z
EPSS history
Timeline
  • 22 OCT 17:09Z
    Format String Injection in Zend Server
    cvelistv5