En bref
- CVE-2020-23653 est une vulnérabilité CRITIQUE (CVSS 9.8) touchant zoujingli/thinkadmin, thinkadmin (thinkadmin).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 4.3%, plus élevée que 91.1% des vulnérabilités.
- Correctif : mettre à jour vers 6.1.0 ou plus récent.
Description
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution.
NVD description
An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution.
Autres vulnérabilités de zoujingli/thinkadmin
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free