A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2024-58136

Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Published
2025-05-02
Modified
2026-07-31
Sources
cisa-kev

Summary

Yii Framework contains an improper protection of alternate path vulnerability that may allow a remote attacker to execute arbitrary code. This vulnerability could affect other products that implement Yii, including—but not limited to—Craft CMS, as represented by CVE-2025-32432.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.