topthink/think
the new thinkphp framework
View on Github
Activity
- Latest release
- 1y ago
- Total releases
- 73
- Cadence
- ~17 days
- Last 12 months
- 0
Reach
- Stars
- —
Details
- License
- Apache-2.0
- First release
- Jan 30, 2016
| Version | Released | |
|---|---|---|
v8.1.3
patch
| ||
v8.1.2
patch
| ||
v8.1
minor
| ||
v8.0.0
major
| ||
v6.1.0
minor
1 CVE
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.13
patch
1 CVE
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.12
patch
1 CVE
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.9
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.41
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.7
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.5
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.3
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.2
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.1
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.40
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.0
major
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.0-rc5
pre
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.38
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.0-rc4
pre
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v6.0.0-rc3
pre
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.37
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.36
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.35
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.34
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.0.24
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.32
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.0.23
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.31
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.29
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.28
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.27
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.26
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.25
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.0.22
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.24
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.23
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.20
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.19
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.17
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.16
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.15
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.14
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.0.20
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.13
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.0.19
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.12
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.11
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.10
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.0.18
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev | ||
v5.1.8
patch
2 CVEs
CVE-2022-45982
GHSA-j2h2-g882-x9j2
Feb 08, 2023
Deserialization of Untrusted Data in thinkphp
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 64 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.10
v6.0.12
v6.0.13
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
v6.1.0
References Updated Nov 08, 2023 · Source: OSV.dev
CVE-2020-17952
GHSA-ch3r-vp46-8g22
Aug 09, 2021
Code injection in topthink/think
9.8
/ 10
Critical
Network
Low
None
None
Unchanged
High
High
High
A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code. Affected versions
5.0
5.0-rc1
5.0-rc2
v5.0.1
v5.0.10
v5.0.11
v5.0.12
v5.0.13
v5.0.14
v5.0.15
v5.0.16
v5.0.18
+ 60 more Show less
v5.0.19
v5.0.2
v5.0.20
v5.0.22
v5.0.23
v5.0.24
v5.0.3
v5.0.4
v5.0.5
v5.0.6
v5.0.7
v5.0.8
v5.0.9
v5.1-beta.1
v5.1-rc.3
v5.1.0
v5.1.10
v5.1.11
v5.1.12
v5.1.13
v5.1.14
v5.1.15
v5.1.16
v5.1.17
v5.1.19
v5.1.20
v5.1.21
v5.1.22
v5.1.23
v5.1.24
v5.1.25
v5.1.26
v5.1.27
v5.1.28
v5.1.29
v5.1.31
v5.1.32
v5.1.34
v5.1.35
v5.1.36
v5.1.37
v5.1.38
v5.1.39
v5.1.40
v5.1.41
v5.1.5
v5.1.6
v5.1.8
v6.0.0
v6.0.0-rc3
v6.0.0-rc4
v6.0.0-rc5
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.0.5
v6.0.6
v6.0.7
v6.0.9
References Updated Nov 08, 2023 · Source: OSV.dev |