Yii 2: Unsafe unserialize (CVE-2020-15148)
Yii 2: Unsafe unserialize (CVE-2020-15148)

Possible remote code execution via unserialize() on user input containing specially crafted string.

- https://www.yiiframework.com/news/303/yii-2-0-38
- https://github.com/yiisoft/yii2/security/advisories/GHSA-699q-wcff-g9mj
- CVE-2020-15148
- Fixed in 2.0.38
FriendsOfPHP/security-advisories,kdambekalns/security-advisories