CVE-2017-11516
CVE-2017-11516
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled.
CVSS 6.1 · Medium · EPSS 0.8% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
yiisoft/yii2-dev Packagist
- Versions
- 2.0.12
- 2.0.12.1
- 2.0.12.2
- Affected ranges
- ECOSYSTEM: ≥ 2.0.12, < 2.0.13
Update to 2.0.13
yiisoft/yii2 Packagist
- Versions
- 2.0.12
- 2.0.12.1
- 2.0.12.2
- Affected ranges
- ECOSYSTEM: ≥ 2.0.12, < 2.0.13
Update to 2.0.13