Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-30492

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-q348-f93x-9gx4

Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain ### Impact Lack of input validation of the Zendesk subdomain could expose users of the library to Server Side Request Forgery (SSRF). ### Resolution Validate the provided Zendesk subdomain to be a valid subdomain in: * getAuthUrl * getAccessToken

gitlab/packagist/zendesk/zendesk_api_client_php/GMS-2021-58

Lack of Input Validation in zendesk_api_client_php for Zendesk Subdomain ### Impact Lack of input validation of the Zendesk subdomain could expose users of the library to Server Side Request Forgery (SSRF). ### Resolution Validate the provided Zendesk subdomain to be a valid subdomain in: * getAuthUrl * getAccessToken