| Package | Affected versions | Patched versions |
|---|---|---|
| yiisoft/yii2-redis | < 2.0.8 | 2.0.8 |
| yii | < 2.0.15 | 2.0.15 |
Potential remote code execution in LUA context of the redis server via methods yii\redis\ActiveRecord::findOne() and yii\redis\ActiveRecord::findAll() in yiisoft/yii2-redis. Attackers could probably manipulate data on the redis server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free