提交 #521718: Yii Software LLC Yii 2.0 <=2.0.39 Deserialization
| 标题 | Yii Software LLC Yii 2.0 <=2.0.39 Deserialization |
|---|---|
| 描述 | Yii version <=2.0.39 has a deserialization vulnerability. If the framework is referenced and there is a deserialization entry point, an attacker can achieve arbitrary command execution through deserialization. |
| 来源 | ⚠️ https:/ |
| 用户 | gaorenyusi (UID 74236) |
| 提交 | 2025-03-17 14時37分 (1 年前) |
| 管理 | 2025-03-23 10時36分 (6 days later) |
| 状态 | 已接受 |
| VulDB条目 | 300711 [yiisoft Yii2 直到 2.0.39 MockClass.php generate 权限提升] |
| 积分 | 17 |