CVE-2022-34297
1 advisory.
Packagist/yiisoft/yii2-gii CVE-2022-34297: medium 5.4, EPSS 0.64%
Yii2 Gii Cross-site Scripting vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.2.4 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-x87m-36g7-6mpw
- https://nvd.nist.gov/vuln/detail/CVE-2022-34297
- https://gist.github.com/be4r/b5c48d97ef6726d3ee37f995ee5aac81
- https://github.com/yiisoft/yii2-gii
- https://www.yiiframework.com/doc/guide/2.0/en/start-gii
CVE-2022-34297 · published · modified · JSON