CVE-2021-43697

MEDIUM 6.1CVE-2021-43697 · Published 29/11/2021 · updated 17/06/2026

In short

CVE-2021-43697 is a MEDIUM (CVSS 6.1) vulnerability affecting workerman-thinkphp-redis (workerman-thinkphp-redis project).
Chance of exploitation in the next 30 days (EPSS): 0.66%, higher than 51.9% of all vulnerabilities.
Fix: update to 2018-03-16 or later.

Package	Affected versions	Patched versions
workerman-thinkphp-redis workerman-thinkphp-redis_project	`< 2018-03-16`	`2018-03-16`

Description

Workerman-ThinkPHP-Redis (last update Mar 16, 2018) is affected by a Cross Site Scripting (XSS) vulnerability. In file Controller.class.php, the exit function will terminate the script and print the message to the user. The message will contain $_GET{C('VAR_JSONP_HANDLER')] then there is a XSS vulnerability.

References

happyliu2014/Workerman-ThinkPHP-Redis · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free