Lucene search
K

14 matches found

Github Security Blog
Github Security Blog
added 2022/09/16 12:0 a.m.28 views

ThinkPHP deserialization vulnerability

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.4AI score0.03772EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/09/16 12:0 a.m.37 views

GHSA-QJJJ-7G7H-54V3 ThinkPHP deserialization vulnerability

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.8AI score0.03772EPSS
Exploits1References3
NVD
NVD
added 2022/09/15 2:15 a.m.15 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS0.03772EPSS
Exploits1References1
OSV
OSV
added 2022/09/15 2:15 a.m.12 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.7AI score
Exploits0References1
Prion
Prion
added 2022/09/15 2:15 a.m.18 views

Deserialization of untrusted data

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

7.5CVSS9.7AI score0.03772EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/09/15 1:5 a.m.12 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.9AI score0.03772EPSS
Exploits1References1
CVE
CVE
added 2022/09/15 1:5 a.m.100 views

CVE-2022-38352

ThinkPHP v6.0.13 contains a deserialization vulnerability in the League\Flysystem\Cached\Storage\Psr6Cache component that can allow arbitrary code execution via a crafted payload. The issue affects ThinkPHP 6.0.13; affected component is League\Flysystem\Cached\Storage\Psr6Cache. Remediation cues ...

9.8CVSS9.7AI score0.03772EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2021/12/07 12:0 a.m.17 views

GHSA-QRVJ-274H-HFCG Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8CVSS9.6AI score0.03362EPSS
Exploits1References3
Github Security Blog
Github Security Blog
added 2021/12/07 12:0 a.m.23 views

Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS9AI score0.03362EPSS
Exploits1References3Affected Software1
NVD
NVD
added 2021/12/06 9:15 p.m.8 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS0.03362EPSS
Exploits1References1
OSV
OSV
added 2021/12/06 9:15 p.m.11 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8CVSS9.6AI score
Exploits0References1
Prion
Prion
added 2021/12/06 9:15 p.m.15 views

Deserialization of untrusted data

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

10CVSS9.5AI score0.03362EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/12/06 8:22 p.m.16 views

CVE-2021-36567

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\AbstractCache...

9.8AI score0.03362EPSS
Exploits1References1
CVE
CVE
added 2021/12/06 8:22 p.m.73 views

CVE-2021-36567

ThinkPHP v6.0.8 contains a deserialization vulnerability in the League\Flysystem\Cached\Storage\AbstractCache component. Affected software: ThinkPHP v6.0.8. Root cause: deserialization vulnerability in the specified cache storage AbstractCache. Impact (per NVD): CVSS v3.1 base score 9.8 (CRITICAL...

10CVSS9.5AI score0.03362EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder