Yii Cross-site Scripting Framework vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-11516 · ADVISORY
• yiisoft/yii2#14492 · WEB
• yiisoft/yii2#14492 · WEB
• yiisoft/yii2-framework · PACKAGE

yiisoft/yii2 のその他の脆弱性

• CVE-2026-39850高 7.4Yii 2 is a PHP application framework. Versions 2.0.54 and prior contain flawed logic in the core view rendering method View::renderPhpFile()…
• CVE-2024-58136緊急 9.8悪用確認済み（CISA KEV）Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited i…
• CVE-2024-4990緊急 9.1In yiisoft/yii2 version 2.0.48, the base Component class contains a vulnerability where the `__set()` magic method does not validate that th…
• CVE-2024-32877中 4.7Yii 2 is a PHP application framework. During internal penetration testing of a product based on Yii2, users discovered a Cross-site Scriptin…
• CVE-2015-5467緊急 9.8web\ViewAction in Yii (aka Yii2) 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter…