Lucene search
GoogleOSV:CVE-2023-47130HistoryNov 14, 2023 - 9:15 p.m.
CVE-2023-47130
2023-11-1421:15:11
Google
osv.dev
7
yii
php
framework
rce
vulnerability
fix
upgrade
unserialize
compromise
host system
Yii is an open source PHP web framework. yiisoft/yii before version 1.1.29 are vulnerable to Remote Code Execution (RCE) if the application calls unserialize() on arbitrary user input. An attacker may leverage this vulnerability to compromise the host system. A fix has been developed for the 1.1.29 release. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Related
nvd
nvd
CVE-2023-47130
2023-11-14 21:15:11
osv
osv
prion
prion
Remote code execution
2023-11-14 21:15:00
veracode
veracode
Arbitrary Code Execution
2023-11-15 18:08:00
cvelist
cvelist
CVE-2023-47130 Unsafe deserialization of user data in yiisoft/yii
2023-11-14 20:30:16
github
github
cve
cve
CVE-2023-47130
2023-11-14 21:15:11