~ / search / GHSA-59fh-rjq3-xq7j

GHSA-59fh-rjq3-xq7j

Thinkphp has a code logic error

Source: GitHub Advisory Database (reviewed) High CVE-2022-44289

Packages

EcosystemPackageAffectedFixed in
Packagist topthink/framework <= 5.0.24 no fix listed
Packagist topthink/framework >= 5.1, <= 5.1.41 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Thinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.

References

External links from the advisory. They lead to third-party sites.