CVE-2018-20745
1 advisory.
Packagist/yiisoft/yii2 CVE-2018-20745: medium 5.9
Yii Incorrectly Implements CORS
Action: Upgrade yiisoft/yii2 to 2.0.16 or later.
composer require yiisoft/yii2:2.0.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.16 | - |
Fixed versions
| 2.0.16 |
Sources
- osv: GHSA-cr6r-6xm9-ww22
- https://nvd.nist.gov/vuln/detail/CVE-2018-20745
- https://github.com/yiisoft/yii2/issues/16193
- https://github.com/yiisoft/yii2/pull/16198
- https://www.usenix.org/system/files/conference/usenixsecurity18/sec18-chen.pdf
CVE-2018-20745 · published · modified · JSON