Em resumo
- CVE-2022-25481 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta topthink/framework, thinkphp (thinkphp).
- Chance de exploração nos próximos 30 dias (EPSS): 4.7%, maior que 91.9% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
Description
ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php.
NVD description
ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment exposure is an intended feature of the debugging mode.
Mais vulnerabilidades de topthink/framework
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free