Lucene search
Veracode Vulnerability DatabaseVERACODE:46775HistoryMay 07, 2024 - 7:04 a.m.
Sensitive Information Disclosure
2024-05-0707:04:44
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
topthink/framework
vulnerability
sensitive information
disclosure
error handling
debug error
phpsession cookie
crafted uri
get request
software
topthink/framework is vulnerable to Sensitive Information Disclosure. The vulnerability is due to improper handling of error messages, which can reveal the PHPSESSION cookie through debug error output source code when a crafted URI is used in a GET request.
Related
cvelist
cvelist
CVE-2024-34467
2024-05-04 00:00:00
github
github
ThinkPHP Cross-Site Scripting Vulnerability
2024-05-04 21:30:33
cve
cve
CVE-2024-34467
2024-05-04 20:15:07
CVE-2024-34466
2024-05-06 15:15:24
osv
osv
ThinkPHP Cross-Site Scripting Vulnerability
2024-05-04 21:30:33
nvd
nvd
CVE-2024-34467
2024-05-04 20:15:07
CVE-2024-34466
2024-05-06 15:15:24