Lucene search
GoogleOSV:CVE-2020-15148HistorySep 15, 2020 - 7:15 p.m.
CVE-2020-15148
2020-09-1519:15:12
Google
osv.dev
6
Yii 2 (yiisoft/yii2) before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize() on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory.
Related
cvelist
cvelist
CVE-2020-15148 Unsafe deserialization in Yii 2
2020-09-15 18:25:12
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Yiiframework Yii
2020-09-21 03:55:55
veracode
veracode
Remote Code Execution (RCE)
2020-09-16 01:39:51
friendsofphp
friendsofphp
osv
osv
Unsafe deserialization in Yii 2
2020-09-15 18:19:56
nuclei
nuclei
Yii 2 < 2.0.38 - Remote Code Execution
2021-03-29 20:47:04
cve
cve
CVE-2020-15148
2020-09-15 19:15:12
prion
prion
Remote code execution
2020-09-15 19:15:00
nvd
nvd
CVE-2020-15148
2020-09-15 19:15:12
github
github
Unsafe deserialization in Yii 2
2020-09-15 18:19:56