CVE-2017-11516

2017-07-2119:29:00

Google

osv.dev

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.5%

JSON

An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled.

CPENameOperatorVersion
yii2eq2.0.6
yii2eq2.0.5
yii2eq2.0.0
yii2eq2.0.3
yii2eq2.0.0-alpha
yii2eq2.0.11.1
yii2eq2.0.11.2
yii2eq2.0.10
yii2eq2.0.0-rc
yii2eq2.0.12