CVE-2018-20745 Yii Incorrectly Implements CORS
Yii framework incorrectly handles wildcard CORS policies by reflecting arbitrary origins, potentially allowing unauthorized cross-origin requests.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2018-20745?
CVE-2018-20745 is a medium-severity vulnerability in n/a, published on 28 Jan 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Yii 2.x through 2.0.15.1 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems.
Weakness: CWE-346
Which versions are affected by CVE-2018-20745?
2 open source packages ship an affected version, including yiisoft/yii2. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
yiisoft/yii2 Packagist | All versions | 2.0.16 |
yiisoft/yii2 Packagist | All versions | 2.0.16 |
Products include Yiiframework Yii.
How do I fix CVE-2018-20745?
Upgrade yiisoft/yii2 to 2.0.16 or later.
Is CVE-2018-20745 being exploited?
There is no known exploitation of CVE-2018-20745 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2024-58136 Yiiframework Yii Improper Protection of Alternate Path
- CVE-2015-5467 Yii2 allows attackers to execute any local .php file via a relative path in the view parameter
- CVE-2023-26750 SQL injection in n/a
- CVE-2018-7269 Yii SQL injection vulnerability
- CVE-2018-8073 yii2-redis Potential Remote code execution
Sources
Also known as GHSA-cr6r-6xm9-ww22.