Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2018-6009
6.8
MEDIUMCVSS v2
Published
January 22, 2018
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity.
GitHub