Lucene search

K
osvGoogleOSV:GHSA-69WP-XWM7-69WM
HistoryMar 22, 2022 - 12:00 a.m.

Exposure of Resource to Wrong Sphere in ThinkPHP Framework

2022-03-2200:00:43
Google
osv.dev
11

0.013 Low

EPSS

Percentile

85.7%

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php.

0.013 Low

EPSS

Percentile

85.7%