Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:yii2-Starter-Kit:yii2-Starter-Kit:*:*:*:*:*:*:*:*

1 brief RSS
critical advisory

Unauthenticated Exposure of Yii Debug and Gii Modules in yii2-starter-kit

Versions of yii2-starter-kit up to 4.2.0 are vulnerable to unauthorized access due to insecure default configurations allowing remote attackers to access debugging and code generation modules.

yii2-starter-kit web-application misconfiguration rce information-disclosure file-upload vulnerability
2r 3t 1c