Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-20745
4.3
MEDIUMCVSS v2
Published
January 28, 2019
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.
GitHub