Skip to content
OpenAdvisories

Vendor

yii2-starter-kit

3 known vulnerabilities.

Products

yii2-starter-kit 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-103475

    yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure

    yii2-starter-kit through 4.2.0 exposes the Yii debug and Gii modules to all IP addresses by setting allowedIPs to ['*'] in its default development configuration. Unauthenticated remote attackers can access the debug endpoint to read sensitive data including s…

    yii2-starter-kit yii2-starter-kit