Lucene search
Veracode Vulnerability DatabaseVERACODE:13278HistoryJan 29, 2019 - 1:59 a.m.
Cross-origin Resource Sharing (CORS) Bypass
2019-01-2901:59:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.001
Percentile
35.4%
yiisoft/yii2 is vulnerable to cross-origin resource sharing (CORS) bypass. It is possible because Yii2 CORS filter exposes origin header value when the policy is configured to wildcard origins.
Related
osv
osv
CVE-2018-20745
2019-01-28 08:29:00
Yii Incorrectly Implements CORS
2022-05-14 01:33:07
cve
cve
CVE-2018-20745
2019-01-28 08:29:00
github
github
Yii Incorrectly Implements CORS
2022-05-14 01:33:07
cvelist
cvelist
CVE-2018-20745
2019-01-28 08:00:00
nvd
nvd
CVE-2018-20745
2019-01-28 08:29:00
prion
prion
Code injection
2019-01-28 08:29:00