CVE-2020-15148 Scanner
Detects 'Remote Code Execution (RCE)' vulnerability in yiisoft yii2 affects v. before 2.0.38.
Used 2k times · 3.3k assets checked · url
CVE
CVE-2020-15148
10.0
CVSShigh
Exploitable remotely over the internet · no authentication required.
Description
Yii 2 (yiisoft/yii2) before version 2.0.38 is vulnerable to remote code execution if the application calls `unserialize()` on arbitrary user input. This is fixed in version 2.0.38. A possible workaround without upgrading is available in the linked advisory.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
yii2
Updated Sep 28, 2026View on NVD →
S4E scanner
CVE history: yii2
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →