CVE-2017-11516 in Yii Framework
Summary
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled.
Reservation
07/21/2017
Disclosure
07/21/2017
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 104361 | Yii Framework Debug Mode exception.php cross site scripting | 79 | Not defined | Official fix | CVE-2017-11516 |