Lucene search

K
osvGoogleOSV:GHSA-3FPV-54FF-WQFJ
HistoryMay 07, 2022 - 12:00 a.m.

Deserialization of Untrusted Data in topthink/framework

2022-05-0700:00:31
Google
osv.dev
13
deserialization
untrusted data
topthink/framework
driver class

EPSS

0.003

Percentile

70.1%

The package topthink/framework before version 6.0.12 is vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class.

EPSS

0.003

Percentile

70.1%

Related for OSV:GHSA-3FPV-54FF-WQFJ