CVE-2015-1786: Cross-Site Request Forgery (CSRF)

June 8, 2017 (updated June 15, 2017)

Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework via null or malformed token identifiers.

References

framework.zend.com/security/advisory/ZF2015-03

Code Behaviors & Features

Detect and mitigate CVE-2015-1786 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →