CVE-2020-23653
CVE-2020-23653
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution.
CVSS 9.8 · Critical · EPSS 4.3% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
zoujingli/thinkadmin Packagist
- Affected ranges
- ECOSYSTEM: ≥ 4.0, < 6.1.0
Update to 6.1.0