CVE-2022-41922

Published November 23rd, 2022

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

`yiisoft/yii` before version 1.1.27 are vulnerable to Remote Code Execution (RCE) if the application calls `unserialize()` on arbitrary user input. This has been patched in 1.1.27.

yiisoft/yii

Yii PHP Framework 1.1.x

GitHub

4.83K