Lucene search
GoogleOSV:GHSA-4HX3-M8W5-G5QHHistoryMay 14, 2022 - 3:31 a.m.
yii2-redis Potential Remote code execution
2022-05-1403:31:31
Google
osv.dev
1
Potential remote code execution in LUA context of the redis server via methods yii\redis\ActiveRecord::findOne() and yii\redis\ActiveRecord::findAll() in yiisoft/yii2-redis. Attackers could probably manipulate data on the redis server.
References
www.yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes
github.com/FriendsOfPHP/security-advisories/blob/master/yiisoft/yii2-redis/CVE-2018-8073.yaml
github.com/yiisoft/yii2-redis
nvd.nist.gov/vuln/detail/CVE-2018-8073
www.yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes
Related
friendsofphp
friendsofphp
github
github
yii2-redis Potential Remote code execution
2022-05-14 03:31:31
osv
osv
CVE-2018-8073
2018-03-21 18:29:00
cvelist
cvelist
CVE-2018-8073
2018-03-21 18:00:00
nvd
nvd
CVE-2018-8073
2018-03-21 18:29:00
prion
prion
Design/Logic Flaw
2018-03-21 18:29:00
cve
cve
CVE-2018-8073
2018-03-21 18:29:00