VendorsYii Frameworkyii2-authclientall versions
Vulnerabilities

Yii Framework Yiiframework Yii2 AuthClient

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-50708
yii2-authclient vulnerable to possible timing attack on string comparison in OAuth1, OAuth2 and OpenID Connect implementation
Published 2023-12-22 · Modified
9.8EPSS 0.007
CVE-2023-50714
The Oauth2 PKCE implementation is vulnerable
Published 2023-12-22 · Modified
8.8EPSS 0.005