Advisories · Technology
yii2-starter-kit.
Every CVE that names yii2-starter-kit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
yii2-starter-kit through 4.2.0 Unauthorized File Download via attachment-download
- yii2-starter-kit
- Broken access control
- CVSS 9.3 CriticalCritical · CVSS 9+
yii2-starter-kit through 4.2.0 Debug and Gii Module Exposure
- yii2-starter-kit
- CWE-489
- CVSS 8.7 High
yii2-starter-kit through 4.2.0 Unrestricted File Upload RCE
- yii2-starter-kit
- Unrestricted file upload