VULNERABILITY INTELLIGENCE

CVE-2024-58136

CVSS score9 CRITICAL
EPSS probability87.76%
CISA KEVKnown exploited vulnerability
Published2025-04-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Known Exploited Vulnerability

Yiiframework Yii Improper Protection of Alternate Path Vulnerability

Vendor / product: Yiiframework / Yii

Description

Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.

Weakness classification

  • CWE-424: Improper Protection of Alternate Path

Primary references