~ / search / GHSA-f4wh-359g-4pq7

GHSA-f4wh-359g-4pq7

ThinkPHP deserialization vulnerability

Source: GitHub Advisory Database (reviewed) Critical CVE-2024-44902

Packages

EcosystemPackageAffectedFixed in
Packagist topthink/framework >= 6.1.3, <= 8.0.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

References

External links from the advisory. They lead to third-party sites.