Remote Information Disclosure and XSS Vulnerability in Yii Framework by YiiSoft
CVE-2018-6010

7.5HIGH

Key Information:

Vendor: Yiiframework
Status: Yiiframework
Vendor: CVE Published:; 22 January 2018

🔔 Create Yiiframework Vulnerability Alert

What is CVE-2018-6010?

The Yii Framework version 2.x prior to 2.0.14 is susceptible to a vulnerability that permits remote attackers to access potentially sensitive information through exception messages. Additionally, it poses a risk for reflected cross-site scripting (XSS) on the error handler page when operating in non-debug mode. The underlying issues are located in the components responsible for error handling within the framework, particularly in base/ErrorHandler.php, log/Dispatcher.php, and views/errorHandler/exception.php. Developers using affected versions should update to mitigate these security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch