Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2022-25481
HistoryMar 20, 2022 - 12:00 a.m.

CVE-2022-25481

2022-03-2000:00:00
mitre
github.com

7 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode.

7 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.7%

Related for VULNRICHMENT:CVE-2022-25481