Slimframework

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Slimframework records in CISA KEV

No Slimframework vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Slim 1 record LOW Slim Psr-7 1 record LOW

Records

2 records

TI-2015-01940 CVE-2015-2171 · GHSA-74mf-vjpg-9xh7

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP…

LOW 38

Middleware/SessionCookie.php in Slim before 2.6.0 allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via crafted session data.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02497 Published 2015-03-30 Fixed in 2.6.0 CWE-94

TI-2023-14371 CVE-2023-30536 · GHSA-q2qj-628g-vhfw

Insecure header validation in slim/psr7

LOW 36

slim/psr7 is a PSR-7 implementation for use with Slim 4.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00743 Published 2023-04-17 Fixed in 1.6.1, 1.5.1 +1 CWE-436

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0