Lucene search
MitreCVELIST:CVE-2018-20745HistoryJan 28, 2019 - 8:00 a.m.
CVE-2018-20745
2019-01-2808:00:00
mitre
www.cve.org
2
yii
cors
security
misconfiguration
Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.
Related
osv
osv
CVE-2018-20745
2019-01-28 08:29:00
Yii Incorrectly Implements CORS
2022-05-14 01:33:07
cve
cve
CVE-2018-20745
2019-01-28 08:29:00
github
github
Yii Incorrectly Implements CORS
2022-05-14 01:33:07
nvd
nvd
CVE-2018-20745
2019-01-28 08:29:00
prion
prion
Code injection
2019-01-28 08:29:00
veracode
veracode
Cross-origin Resource Sharing (CORS) Bypass
2019-01-29 01:59:27