PT-2022-12253
CVE-2021-44892
·
تاريخ النشر
2022-02-10
·
تاريخ التحديث
2022-02-23
الوصف من
CVSS 3.1
8.8
عاليةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
ThinkPHP versions 3.x.x
Description
A Remote Code Execution (RCE) issue exists via the
value[ filename] in index.php, allowing a malicious user to obtain server control privileges.Recommendations
For ThinkPHP versions 3.x.x, update to a version that fixes this issue to prevent exploitation. As a temporary workaround, consider restricting access to the index.php file or disabling the
value[ filename] parameter to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾