A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
Metrics
Affected Vendors & Products
References
History
Thu, 31 Oct 2024 14:15:00 +0000
Type | Values Removed | Values Added |
---|---|---|
First Time appeared |
Thinkphp
Thinkphp thinkphp |
|
Weaknesses | CWE-502 | |
CPEs | cpe:2.3:a:thinkphp:thinkphp:*:*:*:*:*:*:*:* | |
Vendors & Products |
Thinkphp
Thinkphp thinkphp |
|
Metrics |
cvssV3_1
|
Wed, 30 Oct 2024 20:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code. | |
References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2024-10-30T00:00:00
Updated: 2024-10-31T14:07:13.314Z
Reserved: 2024-10-08T00:00:00
Link: CVE-2024-48112
Vulnrichment
Updated: 2024-10-31T14:07:08.915Z
NVD
Status : Awaiting Analysis
Published: 2024-10-30T21:15:14.393
Modified: 2024-11-01T12:57:03.417
Link: CVE-2024-48112
Redhat
No data.