CVE-2024-44902
CVE-2024-44902
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
CVSS 9.8 · Critical · EPSS 4.2%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
topthink/framework Packagist
- Versions
- v6.1.3
- v6.1.4
- v6.1.5
- v8.0.0
- v8.0.0-beta
- v8.0.1
- v8.0.2
- v8.0.3
- v8.0.4
- Affected ranges
- ECOSYSTEM: ≥ 6.1.3, ≤ 8.0.4
No fix published