Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2022/06/30 12:00 a.m.•66 views

Deserialization of Untrusted Data in topthink/framework

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.4AI score0.23905EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2022/06/29 12:15 p.m.•28 views

Deserialization of untrusted data

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

7.5CVSS9.7AI score0.23905EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/06/29 11:38 a.m.•60 views

CVE-2022-33107

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS0.23905EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/29 12:00 a.m.•10 views

CVE-2022-33107: Deserialization of Untrusted Data

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS8.6AI score0.23905EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/12/06 8:22 p.m.•46 views

CVE-2021-36564

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

9.8AI score0.01918EPSS
SaveExploits1References1
Mend
Mend
•added 2021/12/06 8:22 p.m.•5 views

CVE-2021-36564

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

9.8CVSS0.01918EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/06 12:00 a.m.•10 views

CVE-2021-36564: Deserialization of Untrusted Data

ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php...

9.8CVSS5.8AI score0.01918EPSS
SaveExploits1References2
Rows per page
Query Builder