cve-2020-15148

cve-2020-15148 cve-2020-15148...

CVE-2020-15148-bypasses

CVE-2020-15148-bypasses عدة تجاوزات لـ CVE-2020-15148 إلغاء تسلسل yii2 poc1 هذا متاح في الإصدار 2.0.37، وتم إصلاحه في الإصدار 2.0.38، وهذا هو الذي تم تعيينه CVE-2020-15148، والثلاثة التالية هي تجاوزات root@kitploit: checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateActio...

CVE-2020-15148

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory...

CVE-2020-15148

CVE-2020-15148 – Yii 2 (

CVE-2020-15148 Unsafe deserialization in Yii 2

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory...