Lucene search
+L

837 matches found

Github Security Blog
Github Security Blog
added 2021/12/07 12:00 a.m.31 views

Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS9AI score0.02407EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2021/12/07 12:00 a.m.80 views

GHSA-QRVJ-274H-HFCG Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8CVSS9.6AI score0.02407EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/12/06 9:15 p.m.6 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS7.1AI score0.02407EPSS
SaveExploits1References2
OSV
OSV
added 2021/12/06 9:15 p.m.32 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8CVSS9.6AI score
SaveExploits0References1
NVD
NVD
added 2021/12/06 9:15 p.m.27 views

CVE-2021-36564

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

9.8CVSS0.01841EPSS
SaveExploits1References1
NVD
NVD
added 2021/12/06 9:15 p.m.47 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS0.02407EPSS
SaveExploits1References1
OSV
OSV
added 2021/12/06 9:15 p.m.22 views

CVE-2021-36564

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

9.8CVSS7.3AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/12/06 9:15 p.m.8 views

CVE-2021-36564

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

9.8CVSS7.1AI score0.01841EPSS
SaveExploits1References2
Prion
Prion
added 2021/12/06 9:15 p.m.25 views

Deserialization of untrusted data

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

7.5CVSS9.5AI score0.01841EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2021/12/06 9:15 p.m.22 views

Deserialization of untrusted data

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS9.5AI score0.02407EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/12/06 8:22 p.m.97 views

CVE-2021-36564

CVE-2021-36564 : ThinkPHP v6.0.8 contains a deserialization vulnerability in the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php. The issue, described across multiple sources, is a deserialization flaw in ThinkPHP’s framework leading to high-severity impact (NVD CVSS v3.1...

9.8CVSS9.5AI score0.01841EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/12/06 8:22 p.m.96 views

CVE-2021-36567

ThinkPHP v6.0.8 contains a deserialization vulnerability in the League\Flysystem\Cached\Storage\AbstractCache component. Affected software: ThinkPHP v6.0.8. Root cause: deserialization vulnerability in the specified cache storage AbstractCache. Impact (per NVD): CVSS v3.1 base score 9.8 (CRITICAL...

10CVSS9.5AI score0.02407EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/06 8:22 p.m.59 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8AI score0.02407EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/12/06 8:22 p.m.36 views

CVE-2021-36564

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

9.8AI score0.01841EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/12/06 12:00 a.m.11 views

ThinkPHP代码问题漏洞

Top Thinking Information Technology ThinkPHP is a PHP-based, open source, lightweight Web application development framework from China Top Thinking Information Technology. A security vulnerability exists in ThinkPHP v6.0.8, which stems from a deserialization vulnerability in the component...

9.8CVSS5.6AI score0.01841EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/12/06 12:00 a.m.13 views

ThinkPHP代码问题漏洞

Top Thinking Information Technology ThinkPHP is a PHP-based, open source, lightweight Web application development framework from China Top Thinking Information Technology. A code issue vulnerability exists in ThinkPHP v6.0.8, which stems from the component LeagueFlysystemCachedStorageAbstractCach...

10CVSS5.8AI score0.02407EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2021/12/02 2:15 p.m.6 views

CVE-2021-43682

thinkphp-bjyblog last update Jun 4 2021 is affected by a Cross Site Scripting XSS vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $SERVER'HTTPHOST'...

6.1CVSS6.4AI score0.00555EPSS
SaveExploits1References2
NVD
NVD
added 2021/12/02 2:15 p.m.27 views

CVE-2021-43682

thinkphp-bjyblog last update Jun 4 2021 is affected by a Cross Site Scripting XSS vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $SERVER'HTTPHOST'...

6.1CVSS0.00555EPSS
SaveExploits1References1
Prion
Prion
added 2021/12/02 2:15 p.m.22 views

Cross site scripting

thinkphp-bjyblog last update Jun 4 2021 is affected by a Cross Site Scripting XSS vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $SERVER'HTTPHOST'...

4.3CVSS6AI score0.00555EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2021/12/02 1:37 p.m.39 views

CVE-2021-43682

thinkphp-bjyblog last update Jun 4 2021 is affected by a Cross Site Scripting XSS vulnerability in AdminBaseController.class.php. The exit function terminates the script and prints a message to the user that contains $SERVER'HTTPHOST'...

6.1AI score0.00555EPSS
SaveExploits1References1
Rows per page
Query Builder