CVE-2021-44892

Name of the Vulnerable Software and Affected Versions ThinkPHP versions 3.x.x

Description A Remote Code Execution (RCE) issue exists via the value[ filename] in index.php, allowing a malicious user to obtain server control privileges.

Recommendations For ThinkPHP versions 3.x.x, update to a version that fixes this issue to prevent exploitation. As a temporary workaround, consider restricting access to the index.php file or disabling the value[ filename] parameter to minimize the risk of exploitation.