Remote Code Execution (RCE)

yii2 is vulnerable to remote code execution RCE. The attack is possible through the deserialization of untrusted user input to yii\db\BatchQueryResult...