Lucene search
Veracode Vulnerability DatabaseVERACODE:38244HistoryNov 25, 2022 - 3:39 a.m.
Remote Code Execution
2022-11-2503:39:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
27
yiisoft remote code execution cdbcriteria.php improper deserialization untrusted user input control
0.004 Low
EPSS
Percentile
73.7%
yiisoft/yii is vulnerable to remote code execution. The vulnerability exists in the __wakeup function of CDbCriteria.php, due to improper deserialization of untrusted user input, which allows the attacker to control the state or the flow of execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yiisoft/yii | le | 1.1.26 | |
| yiisoft/yii | le | 1.1.26 |
Related
osv
osv
CVE-2022-41922
2022-11-23 18:15:12
Prevent RCE when deserializing untrusted user input
2022-11-21 22:32:04
nvd
nvd
CVE-2022-41922
2022-11-23 18:15:12
cve
cve
CVE-2022-41922
2022-11-23 18:15:12
github
github
Prevent RCE when deserializing untrusted user input
2022-11-21 22:32:04
prion
prion
Remote code execution
2022-11-23 18:15:00
