~ / search / GHSA-pjhx-j53p-c5f5

GHSA-pjhx-j53p-c5f5

ThinkPHP deserialization vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2024-48112

Packages

EcosystemPackageAffectedFixed in
Packagist topthink/thinkphp >= 6.1.3, <= 8.0.4 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

References

External links from the advisory. They lead to third-party sites.