Skip to content
Threat Feed
Subscribe

Product

Yii2-Starter-Kit (<= 4.2.0)

1 brief RSS
critical advisory

Unauthenticated Exposure of Yii Debug and Gii Modules in yii2-starter-kit

Versions of yii2-starter-kit up to 4.2.0 are vulnerable to unauthorized access due to insecure default configurations allowing remote attackers to access debugging and code generation modules.

yii2-starter-kit web-application misconfiguration rce information-disclosure file-upload vulnerability
2r 3t 1c