Lucene search

Deserialization of Untrusted Data in topthink/framework

🗓️ 10 Dec 2021 20:19:23Reported by GitHub Advisory DatabaseType

Deserialization vulnerability in ThinkPHP v6.0.

Reporter	Title	Published	Views	Family All 7
CVE	CVE-2021-36564	6 Dec 202121:15	–	cve
OSV	Deserialization of Untrusted Data in topthink/framework	10 Dec 202120:23	–	osv
OSV	CVE-2021-36564	6 Dec 202121:15	–	osv
CNVD	ThinkPHP Code Issues Vulnerabilities	8 Dec 202100:00	–	cnvd
Prion	Deserialization of untrusted data	6 Dec 202121:15	–	prion
Cvelist	CVE-2021-36564	6 Dec 202120:22	–	cvelist
NVD	CVE-2021-36564	6 Dec 202121:15	–	nvd

Vulners

Node

topthink frameworkRange<6.0.9

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-36564
github	www.github.com/top-think/framework/issues/2559
github	www.github.com/advisories/GHSA-33gc-6cw9-w3g4

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Dec 2021 20:23Current

9High risk

Vulners AI Score9

CVSS27.5

CVSS39.8

EPSS0.00842

CWE-502