Rosetta Intel

CVE-2024-58136

2025-05-02

Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Yiiframework

Yii Framework contains an improper protection of alternate path vulnerability that may allow a remote attacker to execute arbitrary code. This vulnerability could affect other products that implement Yii, including—but not limited to—Craft CMS, as represented by CVE-2025-32432.

CWE-424

RefsThis vulnerability affects a common open-source component, third-party library, or a protocol used by different products. For more information, please see nvd.nist.gov

Federal remediation due 2025-05-23

KEV Catalog