Junglewise Threat Intelligence

CVE-2023-47130: yiisoft/yii deserializing untrusted user input can lead to remote code execution

CVE-2023-47130 · Severity: low · CVSS 3.1 · Published 2023-11-14

Technologies: yiisoft/yii (Packagist). Vendors: Packagist.

Executive brief

yiisoft/yii deserializing untrusted user input can lead to remote code execution

Affected products

  • Packagist yiisoft/yii

Related threats