Package · Packagist

yiisoft/yii2-dev

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

High 8.1

CVE-2021-3692

Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

yiisoft yiisoft/yii2 yiisoft/yii2-dev Packagist

Aug 10, 2021
High 8.1

CVE-2021-3689

Use of Predictable Algorithm in Random Number Generator in yiisoft/yii2

yii2 is vulnerable to Use of Predictable Algorithm in Random Number Generator

yiisoft yiisoft/yii2 yiisoft/yii2-dev Packagist

Aug 10, 2021
High 8.1

CVE-2018-8074

Yii Framework Code Injection

Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension.

yiisoft/yii2-dev yiisoft/yii2-elasticsearch Packagist

Mar 21, 2018
High 8.8

CVE-2018-6009

Yii Framework Cross-Site Request Forgery (CSRF)

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity.

yiisoft/yii2 yiisoft/yii2-dev Packagist

Jan 22, 2018