Lucene search
Veracode Vulnerability DatabaseVERACODE:13278HistoryJan 29, 2019 - 1:59 a.m.
Cross-origin Resource Sharing (CORS) Bypass
2019-01-2901:59:27
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.001 Low
EPSS
Percentile
27.0%
yiisoft/yii2 is vulnerable to cross-origin resource sharing (CORS) bypass. It is possible because Yii2 CORS filter exposes origin header value when the policy is configured to wildcard origins.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yiisoft/yii2 | le | 2.0.15.1 |
Related
osv
osv
CVE-2018-20745
2019-01-28 08:29:00
Yii Incorrectly Implements CORS
2022-05-14 01:33:07
cve
cve
CVE-2018-20745
2022-10-03 16:22:04
nvd
nvd
CVE-2018-20745
2019-01-28 08:29:00
cvelist
cvelist
CVE-2018-20745
2022-10-03 16:22:04
github
github
Yii Incorrectly Implements CORS
2022-05-14 01:33:07
prion
prion
Code injection
2019-01-28 08:29:00