CVE-2025-48493 | BDVDB-2026-281166 Detail

Description#

The Yii 2 Redis extension provides the redis key-value store support for the Yii framework 2.0. On failing connection, the extension writes commands sequence to logs. Prior to version 2.0.20, AUTH parameters are written in plain text exposing username and password. That might be an issue if attacker has access to logs. Version 2.0.20 fixes the issue.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-06-05Record published in the CVE List.
2. Version 22025-06-09Most recent update recorded in the CVE List.