CVE-2018-6010

2018-01-2222:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

In Yii Framework 2.x before 2.0.14, remote attackers could obtain potentially sensitive information from exception messages, or exploit reflected XSS on the error handler page in non-debug mode. Related to base/ErrorHandler.php, log/Dispatcher.php, and views/errorHandler/exception.php.