The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class...
7.5CVSS9.4AI score0.0165EPSS
SaveExploits0References3Affected Software1
Cvelist•added 2022/05/06 8:5 p.m.•51 views
CVE-2021-23592 Deserialization of Untrusted Data
The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class...