feature symfony#27 add CVE-2014-4672 (minkbear)

fabpot · fabpot · commit c1dcb8bc671a · 2014-08-28T19:20:48.000+02:00
This PR was merged into the master branch. Discussion ---------- add CVE-2014-4672 Commits ------- 9ee6d65 add CVE-2014-4672
diff --git a/yiisoft/yii/CVE-2014-4672.yaml b/yiisoft/yii/CVE-2014-4672.yaml
@@ -0,0 +1,8 @@
+title:     The CDetailView widget allows remote attackers to execute arbitrary PHP scripts via vectors related to the value property
+link:      http://www.yiiframework.com/news/78/yii-1-1-15-is-released-security-fix/
+cve:       CVE-2014-4672
+branches:
+    1.1.x:
+        time:     2014-06-30 07:15:00
+        versions: [>=1.1.14,<1.1.15]
+reference: composer://yiisoft/yii
