CVE-2025-32027
Yii does not prevent XSS in scenarios where fallback error renderer is used
概要
Yii does not prevent XSS in scenarios where fallback error renderer is used
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Yii is an open source PHP web framework. Prior to 1.1.31, yiisoft/yii is vulnerable to Reflected XSS in specific scenarios where the fallback error renderer is used. Upgrade yiisoft/yii to version 1.1.31 or higher.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com