Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2022/06/30 12:00 a.m.•65 views

Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.4AI score0.23905EPSS
SaveExploits1References3Affected Software1
osv_ghsa
osv_ghsa
•added 2022/06/30 12:00 a.m.•145 views

GHSA-G377-X8RG-C9MF Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.7AI score0.23905EPSS
SaveExploits1References3
Prion
Prion
•added 2022/06/29 12:15 p.m.•27 views

Deserialization of untrusted data

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

7.5CVSS9.7AI score0.23905EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2022/06/29 11:38 a.m.•53 views

CVE-2022-33107

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.9AI score0.23905EPSS
SaveExploits1References1
Mend
Mend
•added 2022/06/29 11:38 a.m.•20 views

CVE-2022-33107

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS0.23905EPSS
SaveExploits1References4
CVE
CVE
•added 2022/06/29 11:38 a.m.•169 views

CVE-2022-33107

ThinkPHP v6.0.12 is affected by a deserialization vulnerability in vendor\flysystem-cached-adapter\src\Storage\AbstractCache.php that allows arbitrary code execution via a crafted payload. Red Hat and other feeds corroborate a deserialization flaw in topthink/framework components, with impact des...

9.8CVSS9.6AI score0.23905EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/29 12:00 a.m.•10 views

CVE-2022-33107: Deserialization of Untrusted Data

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS8.6AI score0.23905EPSS
SaveExploits1References2
Rows per page
Query Builder