CVE Intelligence

Composer Yiisoft/yii2 vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Composer Yiisoft/yii2: 1 record(s), with affected versions and fixes.

CVE-2024-58136 Critical · 9.8 KEV High · 64 Public exploit CWE-424 Apr 10, 2025
Yiiframework Yii Improper Protection of Alternate Path Vulnerability
Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.