Deserialization Of Untrusted Data

2022-05-0904:13:47

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

topthink/framework

unserialize function

control of execution

EPSS

0.003

Percentile

70.1%

JSON

topthink/framework is vulnerable to deserialization of untrusted data. The vulnerability exists in unserialize function in Driver.php due to the use of string type as the method parameter which allows an attacker to control the state or the flow of the execution.