CVE-2020-36655
1 advisory.
Packagist/yiisoft/yii2-gii CVE-2020-36655: high 8.8
Command injection in yiisoft/yii2-gii
Action: Upgrade yiisoft/yii2-gii to 2.2.2 or later.
composer require yiisoft/yii2-gii:2.2.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.2 | - |
Fixed versions
| 2.2.2 |
Sources
- osv: GHSA-3mpg-q26j-83j5
- https://nvd.nist.gov/vuln/detail/CVE-2020-36655
- https://github.com/yiisoft/yii2-gii/issues/433
- https://github.com/yiisoft/yii2-gii/commit/ed61e0d85f43e23f79d7c9d1b4e5e5c09a32ce4b
- https://github.com/yiisoft/yii2-gii
- https://lab.wallarm.com/yii2-gii-remote-code-execution
CVE-2020-36655 · published · modified · JSON