GitHub Advisoryadvisory · Packagist

GHSA-75jp-87w2-c6x2 ThinkPHP Remote Code Execution (RCE) vulnerability

HIGH Published 2022-02-11 Modified 2024-04-24 Official page ↗
Aliases
CVE-2021-44892
Ecosystem
Packagist
Packages
topthink/framework
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Reviewed
2024-04-24

Affected packages

• Packagist topthink/framework: <= 3.2.3 (no fix yet)

Description

A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obtain server control privileges.

Related

Alias · CVE (1)

  • CVE-2021-44892 A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user… vulnerability

References