CVE-2018-12290
1 advisory.
Packagist/ptheofan/yii2-statemachine CVE-2018-12290: medium 6.1, EPSS 0.70%
Yii2-StateMachine extension for Yii2 XSS Vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.0.0-RC1 | - | 2.0.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-65qg-f77j-cccf
- https://nvd.nist.gov/vuln/detail/CVE-2018-12290
- https://github.com/ptheofan/yii2-statemachine
- https://web.archive.org/web/20180624194633/http://www.iwantacve.cn/index.php/archives/40
CVE-2018-12290 · published · modified · JSON