9 matches found
Untrusted Object Deserialisation
topthink/think is vulnerable to untrusted object deserialisation. The vulnerability exists in the AbstractCache function in CacheStore.php which allows an attacker to inject and execute arbitrary code via a crafted payload...
9.8CVSS9.2AI score0.22794EPSS
SaveExploits1References3Affected Software1
20