LFI vector in Zend_View::setScriptPath() and render()

PKSA-ry2q-88gq-kq94

Affected package: zendframework/zendframework1

Affected version: >=1.7.0,<1.7.5

Reported by:
FriendsOfPHP/security-advisories