Executive brief
yiisoft/yii deserializing untrusted user input can lead to remote code execution
Affected products
- Packagist yiisoft/yii
Junglewise Threat Intelligence
CVE-2023-47130 · Severity: low · CVSS 3.1 · Published 2023-11-14
Technologies: yiisoft/yii (Packagist). Vendors: Packagist.
yiisoft/yii deserializing untrusted user input can lead to remote code execution