CVE-2017-11516

    Dashboard / Vulnerabilities / CVE-2017-11516

    CVE-2017-11516

    Published: 21 Jul 2017Last Modified: 7 Aug 2026

    Summary:

    Details: An XSS vulnerability exists in framework/views/errorHandler/exception.php in Yii Framework 2.0.12 affecting the exception screen when debug mode is enabled, because $exception->errorInfo is mishandled.

    References: https://github.com/yiisoft/yii2/pull/14492, https://github.com/yiisoft/yii2/pull/14492/files/feb4067de8a58f391a66e395192b0d83a8109b95

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- be658f82bf515f1c1040cb6f987280f436258dc0
    Fixed -None

    Affected versions

    2.0.12

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High