Plain Text Exposure in Yii 2 Redis Extension Affects Key-Value Store Security

CVE-2025-48493

What is CVE-2025-48493?

The Yii 2 Redis extension, essential for integrating Redis key-value store functionality within the Yii framework 2.0, contains a vulnerability where, upon connection failure, sensitive AUTH parameters such as usernames and passwords are logged in plaintext. This exposure could pose a significant security risk if an unauthorized user gains access to these logs. It is crucial for users of versions prior to 2.0.20 to upgrade to this version, which addresses the issue by preventing sensitive data from being logged.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References