Deserialization of untrusted data

2023-02-0821:15:00

PRIOn knowledge base

www.prio-n.com

thinkphp

deserialization

vulnerability

arbitrary code

crafted payload

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload.

CPENameOperatorVersion
thinkphpeq6.1.0
thinkphpge6.0.0
thinkphple6.0.13

Name	Operator	Version
thinkphp	eq	6.1.0
thinkphp	ge	6.0.0
thinkphp	le	6.0.13

References

gist.github.com/Dar1in9s/aa87df679057db3bbdade360d77f8cca