Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/02/05 11:32 p.m.•14 views

CVE-2022-41922

yiisoft/yii before version 1.1.27 are vulnerable to Remote Code Execution RCE if the application calls unserialize on arbitrary user input. This has been patched in 1.1.27...

9.8CVSS7.5AI score0.01224EPSS
SaveExploits0References1
NVD
NVD
•added 2022/11/23 6:15 p.m.•35 views

CVE-2022-41922

yiisoft/yii before version 1.1.27 are vulnerable to Remote Code Execution RCE if the application calls unserialize on arbitrary user input. This has been patched in 1.1.27...

9.8CVSS0.01224EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/23 12:00 a.m.•133 views

CVE-2022-41922

The CVE-2022-41922 entry affects the PHP framework yiisoft/yii. Prior to version 1.1.27, applications that call unserialize() on arbitrary user input are vulnerable to Remote Code Execution. The issue has been patched in 1.1.27. The vulnerability carries a high/critical impact potential per multi...

9.8CVSS8.1AI score0.01224EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/11/23 12:00 a.m.•48 views

CVE-2022-41922 yiisoft/yii before v1.1.27 vulnerable to Remote Code Execution if the application calls `unserialize()` on arbitrary user input

yiisoft/yii before version 1.1.27 are vulnerable to Remote Code Execution RCE if the application calls unserialize on arbitrary user input. This has been patched in 1.1.27...

8.1CVSS10AI score0.01224EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2022/11/23 12:00 a.m.•5 views

CVE-2022-41922 yiisoft/yii before v1.1.27 vulnerable to Remote Code Execution if the application calls `unserialize()` on arbitrary user input

yiisoft/yii before version 1.1.27 are vulnerable to Remote Code Execution RCE if the application calls unserialize on arbitrary user input. This has been patched in 1.1.27...

8.1CVSS9.7AI score0.01224EPSS
SaveExploits0References2
OSV
OSV
•added 2022/11/23 12:00 a.m.•34 views

CVE-2022-41922 yiisoft/yii before v1.1.27 vulnerable to Remote Code Execution if the application calls `unserialize()` on arbitrary user input

yiisoft/yii before version 1.1.27 are vulnerable to Remote Code Execution RCE if the application calls unserialize on arbitrary user input. This has been patched in 1.1.27...

8.1CVSS9.4AI score
SaveExploits0References4
Rows per page
Query Builder