Lucene search

K
osvGoogleOSV:CVE-2022-25481
HistoryMar 21, 2022 - 12:15 a.m.

CVE-2022-25481

2022-03-2100:15:07
Google
osv.dev
15
thinkphp
v5.0.24
misconfigured
pathinfo
parameter
system environment
index.php
attackers
software

AI Score

7.3

Confidence

High

EPSS

0.013

Percentile

85.7%

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php.

AI Score

7.3

Confidence

High

EPSS

0.013

Percentile

85.7%