CVE-2021-44892

2022-02-1017:15:09

Google

osv.dev

cve-2021-44892

thinkphp

remote code execution

index.php

server control privileges

AI Score

7.5

Confidence

High

EPSS

0.004

Percentile

73.9%

JSON

A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obtain server control privileges.

References

github.com/Stakcery/Web-Security/issues/1