Yiiframework vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Yiiframework products: 1 record(s), with severity, exploitation and fixes.

Yii 1

Exploited only (KEV) →

CVE-2024-58136 Critical · 9.8 KEV High · 64 Public exploit CWE-424 Apr 10, 2025

Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.