CVE-2020-15148-bypasses

CVE-2020-15148-bypasses CVE-2020-15148（yii2の逆シリアル化）に関するいくつかのバイパス poc1 root@kitploit: checkAccess = 'system'; $this-id = 'ls'; namespace Faker use yii\rest\CreateAction; class Generator protected $formatters; public function construct $this-formatters'close' = new CreateAction, 'run'; namespace...

cve-2020-15148

cve-2020-15148 cve-2020-15148...

CVE-2020-15148

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory...

CVE-2020-15148

CVE-2020-15148 – Yii 2 (

CVE-2020-15148 Unsafe deserialization in Yii 2

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory...