Lucene search
GoogleOSV:GHSA-M2P5-FWP2-QCW2HistoryMay 24, 2022 - 4:56 p.m.
Yii Framework Code Injection
2022-05-2416:56:44
Google
osv.dev
2
0.003 Low
EPSS
Percentile
71.6%
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension.
References
www.yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes
github.com/FriendsOfPHP/security-advisories/blob/master/yiisoft/yii2-elasticsearch/CVE-2018-8074.yaml
github.com/yiisoft/yii2
nvd.nist.gov/vuln/detail/CVE-2018-8074
www.yiiframework.com/news/168/releasing-yii-2-0-15-and-database-extensions-with-security-fixes
Related
cve
cve
osv
osv
CVE-2018-8074
2018-03-21 18:29:00
Yii SQL injection vulnerability
2022-05-24 16:59:28
CVE-2018-7269
2018-03-21 18:29:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2018-03-21 18:29:00
Sql injection
2018-03-21 18:29:00
Design/Logic Flaw
2018-03-21 18:29:00
github
github
Yii Framework Code Injection
2022-05-24 16:56:44
Yii SQL injection vulnerability
2022-05-24 16:59:28
nvd
nvd
friendsofphp
friendsofphp