Skip to content
OpenAdvisories

Product · yiisoft

yii2

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2025-2690

    yiisoft Yii2 MockClass.php generate deserialization

    A vulnerability, which was classified as critical, was found in yiisoft Yii2 up to 2.0.39. This affects the function Generate of the file phpunit\src\Framework\MockObject\MockClass.php. The manipulation leads to deserialization. It is possible to initiate the…

    yiisoft yii2
  • Medium 6.3
    CVE-2025-2689

    yiisoft Yii2 SortableIterator.php getIterator deserialization

    A vulnerability, which was classified as critical, has been found in yiisoft Yii2 up to 2.0.45. Affected by this issue is the function getIterator of the file symfony\finder\Iterator\SortableIterator.php. The manipulation leads to deserialization. The attack …

    yiisoft yii2 yiisoft/yii2-dev Packagist
  • Medium 4.2
    CVE-2024-32877

    Reflected Cross-site Scripting in yiisoft/yii2 Debug mode

    Yii 2 is a PHP application framework. During internal penetration testing of a product based on Yii2, users discovered a Cross-site Scripting (XSS) vulnerability within the framework itself. This issue is relevant for the latest version of Yii2 (2.0.49.3). Th…

    yiisoft yii2 yiisoft/yii2 Packagist