Code injection

2021-12-2223:15:00

PRIOn knowledge base

www.prio-n.com

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.7%

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.

CPENameOperatorVersion
thinkcmfeq2.2.2120
thinkcmfeq2.2.1120
thinkcmfeq2.2.120
thinkcmfeq2.1.120
thinkcmfeq1.6.120

Name	Operator	Version
thinkcmf	eq	2.2.2120
thinkcmf	eq	2.2.1120
thinkcmf	eq	2.2.120
thinkcmf	eq	2.1.120
thinkcmf	eq	1.6.120

References

blog.riskivy.com/thinkcmf-%e6%a1%86%e6%9e%b6%e4%b8%8a%e7%9a%84%e4%bb%bb%e6%84%8f%e5%86%85%e5%ae%b9%e5%8c%85%e5%90%ab%e6%bc%8f%e6%b4%9e/