EUVD-2022-3649

Malicious code in bioql PyPI...

CVE-2018-6009

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity...

CVE-2018-6009

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity...

PT-2018-17292

Name of the Vulnerable Software and Affected Versions: Yii Framework versions prior to 2.0.14 Description: The issue arises from the switchIdentity function in web/User.php, which fails to regenerate the CSRF token when there is a change of identity. Recommendations: For versions prior to 2.0.14,...

CVE-2018-6009: Cross-Site Request Forgery (CSRF)

In Yii Framework 2.x before 2.0.14, the switchIdentity function in web/User.php did not regenerate the CSRF token upon a change of identity...

The switchIdentity() function in yii\web\User did not regenerate the CSRF token upon a change of identity

More info at https://www.yiiframework.com/news/165/yii-2-0-14-is-released/...

The switchIdentity() function in yii\web\User did not regenerate the CSRF token upon a change of identity

More info at https://www.yiiframework.com/news/165/yii-2-0-14-is-released/...