Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Yiiframework Component: Yii2-authclient Clear all filters
TI-2023-27660 CVE-2023-50714 · GHSA-rw54-6826-c8j5

The Oauth2 PKCE implementation is vulnerable

Priority MEDIUM 41

yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00492 Published 2023-12-22 Fixed in 2.2.15 CWE-347
TI-2023-27654 CVE-2023-50708 · GHSA-w8vh-p74j-x9xp

Observable discrepancy in Yiiframework yii2-authclient

Priority MEDIUM 43

yii2-authclient is an extension that adds OpenID, OAuth, OAuth2 and OpenId Connect consumers for the Yii framework 2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00716 Published 2023-12-22 Fixed in 2.2.15 CWE-203