TI-2023-27654 CVE-2023-50708 · GHSA-w8vh-p74j-x9xp
Observable discrepancy in Yiiframework yii2-authclient
Priority MEDIUM 43
yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0.
Yiiframework
Records29All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
Yiiframework records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Yii2-authclient · all components
TI-2023-27660 CVE-2023-50714 · GHSA-rw54-6826-c8j5
The Oauth2 PKCE implementation is vulnerable
Priority MEDIUM 41
yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0.