Yii 2 before 2.0.52 mishandles the attaching of behavior that is defined by an __class array key, a CVE-2024-4990 regression, as exploited in the wild in February through April 2025.

VPNpro

The best VPN service advice from VPNpro experts. Unbiased VPN reviews, speed tests, comparisons and researches. We care about your online privacy!