Skip to content
OpenAdvisories

Product · yiisoft

yii2-redis

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2025-48493

    Yii 2 Redis may expose AUTH paramters in logs in case of connection failure

    The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and pas…

    yiisoft yii2-redis yiisoft/yii2-redis Packagist