yiisoft/yii2-elasticsearch
Elasticsearch integration and ActiveRecord for the Yii framework
View on Github
Activity
- Latest release
- 1y ago
- Total releases
- 17
- Cadence
- ~5 months
- Last 12 months
- 0
Reach
- Stars
- —
Details
- License
- BSD-3-Clause
- First release
- Dec 01, 2013
| Version | Released | |
|---|---|---|
2.1.5
patch
|
2.1.5
patch
Dependencies (1)
Changelog
Compare changes
|
|
2.1.4
patch
| ||
2.1.3
patch
| ||
2.1.2
patch
| ||
2.1.1
patch
| ||
2.1.0
minor
| ||
2.0.7
patch
| ||
2.0.6
patch
| ||
2.0.5
patch
| ||
2.0.4
patch
1 CVE
CVE-2018-8074
GHSA-m2p5-fwp2-qcw2
May 24, 2022
Yii Framework Code Injection
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension. Affected versions
2.0.0
2.0.0-alpha
2.0.0-beta
2.0.0-rc
2.0.1
2.0.2
2.0.3
2.0.4
Fixed in
2.0.5
References
Updated Feb 16, 2024 · Source: OSV.dev | ||
2.0.3
patch
1 CVE
CVE-2018-8074
GHSA-m2p5-fwp2-qcw2
May 24, 2022
Yii Framework Code Injection
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension. Affected versions
2.0.0
2.0.0-alpha
2.0.0-beta
2.0.0-rc
2.0.1
2.0.2
2.0.3
2.0.4
Fixed in
2.0.5
References
Updated Feb 16, 2024 · Source: OSV.dev | ||
2.0.2
patch
1 CVE
CVE-2018-8074
GHSA-m2p5-fwp2-qcw2
May 24, 2022
Yii Framework Code Injection
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension. Affected versions
2.0.0
2.0.0-alpha
2.0.0-beta
2.0.0-rc
2.0.1
2.0.2
2.0.3
2.0.4
Fixed in
2.0.5
References
Updated Feb 16, 2024 · Source: OSV.dev | ||
2.0.1
patch
1 CVE
CVE-2018-8074
GHSA-m2p5-fwp2-qcw2
May 24, 2022
Yii Framework Code Injection
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension. Affected versions
2.0.0
2.0.0-alpha
2.0.0-beta
2.0.0-rc
2.0.1
2.0.2
2.0.3
2.0.4
Fixed in
2.0.5
References
Updated Feb 16, 2024 · Source: OSV.dev | ||
2.0.0
initial
1 CVE
CVE-2018-8074
GHSA-m2p5-fwp2-qcw2
May 24, 2022
Yii Framework Code Injection
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension. Affected versions
2.0.0
2.0.0-alpha
2.0.0-beta
2.0.0-rc
2.0.1
2.0.2
2.0.3
2.0.4
Fixed in
2.0.5
References
Updated Feb 16, 2024 · Source: OSV.dev | ||
2.0.0-rc
pre
1 CVE
CVE-2018-8074
GHSA-m2p5-fwp2-qcw2
May 24, 2022
Yii Framework Code Injection
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension. Affected versions
2.0.0
2.0.0-alpha
2.0.0-beta
2.0.0-rc
2.0.1
2.0.2
2.0.3
2.0.4
Fixed in
2.0.5
References
Updated Feb 16, 2024 · Source: OSV.dev | ||
2.0.0-beta
pre
1 CVE
CVE-2018-8074
GHSA-m2p5-fwp2-qcw2
May 24, 2022
Yii Framework Code Injection
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension. Affected versions
2.0.0
2.0.0-alpha
2.0.0-beta
2.0.0-rc
2.0.1
2.0.2
2.0.3
2.0.4
Fixed in
2.0.5
References
Updated Feb 16, 2024 · Source: OSV.dev | ||
2.0.0-alpha
pre
1 CVE
CVE-2018-8074
GHSA-m2p5-fwp2-qcw2
May 24, 2022
Yii Framework Code Injection
8.1
/ 10
High
Network
High
None
None
Unchanged
High
High
High
Yii 2.x before 2.0.15 allows remote attackers to inject unintended search conditions via a variant of the CVE-2018-7269 attack in conjunction with the Elasticsearch extension. Affected versions
2.0.0
2.0.0-alpha
2.0.0-beta
2.0.0-rc
2.0.1
2.0.2
2.0.3
2.0.4
Fixed in
2.0.5
References
Updated Feb 16, 2024 · Source: OSV.dev |