Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2022/09/16 12:0 a.m.29 views

ThinkPHP deserialization vulnerability

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.4AI score0.03772EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/09/16 12:0 a.m.37 views

GHSA-QJJJ-7G7H-54V3 ThinkPHP deserialization vulnerability

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.8AI score0.03772EPSS
Exploits1References3
NVD
NVD
added 2022/09/15 2:15 a.m.15 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS0.03772EPSS
Exploits1References1
OSV
OSV
added 2022/09/15 2:15 a.m.14 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.7AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/15 2:15 a.m.3 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS6.1AI score0.03772EPSS
Exploits1References2
Prion
Prion
added 2022/09/15 2:15 a.m.18 views

Deserialization of untrusted data

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

7.5CVSS9.7AI score0.03772EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2022/09/15 1:5 a.m.100 views

CVE-2022-38352

ThinkPHP v6.0.13 contains a deserialization vulnerability in the League\Flysystem\Cached\Storage\Psr6Cache component that can allow arbitrary code execution via a crafted payload. The issue affects ThinkPHP 6.0.13; affected component is League\Flysystem\Cached\Storage\Psr6Cache. Remediation cues ...

9.8CVSS9.7AI score0.03772EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/09/15 1:5 a.m.12 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.9AI score0.03772EPSS
Exploits1References1
Rows per page
Query Builder