CVE-2020-15148-bypasses

CVE-2020-15148-bypasses Algunas bypasses de CVE-2020-15148 deserialización de Yii2 poc1 Esta es explotable en la versión 2.0.37; la 2.0.38 lo corrigió, y es a esta a la que se asignó CVE-2020-15148. Las tres siguientes son bypasses. checkAccess = 'system'; $this-id = 'ls'; namespace Faker use...

cve-2020-15148

cve-2020-15148 cve-2020-15148...

CVE-2020-15148

creationtimestamp| type| source ---|---|--- 2026-09-22 23:00:22+00:00| seen| Telegram/ig7K5wALKnw7tbTFiMmZIJAWkE7HJFNiMnvDDeQWUrdrGe4 2026-09-22 23:00:22+00:00| published-proof-of-concept| Telegram/ig7K5wALKnw7tbTFiMmZIJAWkE7HJFNiMnvDDeQWUrdrGe4...

CVE-2020-15148

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory...

CVE-2020-15148 Unsafe deserialization in Yii 2

Yii 2 yiisoft/yii2 before version 2.0.38 is vulnerable to remote code execution if the application calls unserialize on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory...

CVE-2020-15148

CVE-2020-15148 – Yii 2 (