Beveiligingsadvies

CVE-2022-31454

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-07-28 00:00:00
Laatst bijgewerkt 2024-08-03 07:19:05
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this is disputed by the vendor because the cve-2022-31454-8e8555c31fd3 page does not describe why /books has a relationship to Yii 2.