Packagist/yiisoft/yii CVE-2014-4672: high, EPSS 2.12%

Yii PHP Framework arbitrary PHP scripts execution

Action: Upgrade yiisoft/yii to 1.1.15 or later.

composer require yiisoft/yii:1.1.15

Affected

Fixed versions

Sources

• osv: GHSA-74qv-rv53-5wcx
• https://nvd.nist.gov/vuln/detail/CVE-2014-4672
• https://github.com/FriendsOfPHP/security-advisories/blob/master/yiisoft/yii/CVE-2014-4672.yaml
• https://github.com/yiisoft/yii
• https://www.yiiframework.com/news/78/yii-1-1-15-is-released-security-fix

CVE-2014-4672 · published 2022-05-17T04:38:57Z · modified 2024-12-07T05:40:29.559297Z · JSON