En resumen
- CVE-2022-25481 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a topthink/framework, thinkphp (thinkphp).
- Probabilidad de explotación en los próximos 30 días (EPSS): 4.7%, mayor que el 91.9% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php.
NVD description
ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode.
Más vulnerabilidades de topthink/framework
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free