提交 #521709: Yii Software LLC Yii 2.0 <=2.0.45 RCE
| 标题 | Yii Software LLC Yii 2.0 <=2.0.45 RCE |
|---|---|
| 描述 | Yii version <=2.0.45 has a deserialization vulnerability. If the framework is referenced and there is a deserialization entry point, an attacker can achieve arbitrary command execution through deserialization. |
| 来源 | ⚠️ https:/ |
| 用户 | gaorenyusi (UID 74236) |
| 提交 | 2025-03-17 14時28分 (2 年前) |
| 管理 | 2025-03-23 10時36分 (6 days later) |
| 状态 | 已接受 |
| VulDB条目 | 300710 [yiisoft Yii2 直到 2.0.45 SortableIterator.php getIterator 权限提升] |
| 积分 | 17 |