Lucene search

GitHub Advisory DatabaseGHSA-969F-V7JV-PGJ3

HistoryMay 04, 2024 - 9:30 p.m.

ThinkPHP Cross-Site Scripting Vulnerability

2024-05-0421:30:33

GitHub Advisory Database

github.com

thinkphp

remote attackers

phpsession

debug error

get request

software vulnerability

5.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.

Affected configurations

Vulners

Node

topthinkframeworkRange<6.0.17

topthinkframeworkRange<6.1.5

topthinkframeworkRange<8.0.4

CPENameOperatorVersion
topthink/frameworklt6.0.17
topthink/frameworklt6.1.5
topthink/frameworklt8.0.4

Name	Operator	Version
topthink/framework	lt	6.0.17
topthink/framework	lt	6.1.5
topthink/framework	lt	8.0.4

github.com/advisories/GHSA-969f-v7jv-pgj3

github.com/top-think/framework/commit/403358cd3e510e2fdab63f951930bdd093314eee

github.com/top-think/framework/commit/57d1950a1844ef8d3098ea290032aeb92e2e32c3

github.com/top-think/framework/commit/d3904e51e279c3b72ee206192aeccf9b1cffb534

github.com/top-think/framework/issues/2996

nvd.nist.gov/vuln/detail/CVE-2024-34467