CVE-2021-44892
CVE-2021-44892
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A Remote Code Execution (RCE) vulnerability exists in ThinkPHP 3.x.x via value[_filename] in index.php, which could let a malicious user obtain server control privileges.
CVSS 8.8 · High · EPSS 2.0%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
topthink/framework Packagist
- Affected ranges
- ECOSYSTEM: ≤ 3.2.3
No fix published