Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2022/09/16 12:0 a.m.42 views

ThinkPHP deserialization vulnerability

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.4AI score0.20199EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/09/16 12:0 a.m.37 views

GHSA-QJJJ-7G7H-54V3 ThinkPHP deserialization vulnerability

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.8AI score0.20199EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/09/15 2:15 a.m.8 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS6.1AI score0.20199EPSS
Exploits1References2
NVD
NVD
added 2022/09/15 2:15 a.m.44 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS0.20199EPSS
Exploits1References1
Prion
Prion
added 2022/09/15 2:15 a.m.19 views

Deserialization of untrusted data

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

7.5CVSS9.7AI score0.20199EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2022/09/15 1:5 a.m.18 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.8CVSS9.7AI score0.20199EPSS
Exploits1References3
Cvelist
Cvelist
added 2022/09/15 1:5 a.m.39 views

CVE-2022-38352

ThinkPHP v6.0.13 was discovered to contain a deserialization vulnerability via the component League\Flysystem\Cached\Storage\Psr6Cache. This vulnerability allows attackers to execute arbitrary code via a crafted payload...

9.9AI score0.20199EPSS
Exploits1References1
CVE
CVE
added 2022/09/15 1:5 a.m.105 views

CVE-2022-38352

ThinkPHP v6.0.13 contains a deserialization vulnerability in the League\Flysystem\Cached\Storage\Psr6Cache component that can allow arbitrary code execution via a crafted payload. The issue affects ThinkPHP 6.0.13; affected component is League\Flysystem\Cached\Storage\Psr6Cache. Remediation cues ...

9.8CVSS9.7AI score0.20199EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder