CVE-2022-47945
Path traversal in Thinkphp
CVSS score
9.8
EPSS probability
%28.7
Risk score
2.8
Published
3 y ago
Related Security News
Articles and analysis bulletins in which the press and security publications have covered this vulnerability:
ThreatsDay: AI Secrets Leak, PingCAP Source Theft, Signal Hang-Up Flaw, Laravel Auth Bypass + 21 More
This week has already been rough for cybersecurity. Critical PHP and GitLab RCE flaws, serious Linux security bugs, compromised eMudhra certificates, a Node.js RCE flaw, a hacked LiteLLM release, and hundreds of hijacked Tor relays. That's a lot to deal with in just a few days. And the week isn't even over yet. But those big headlines are only half the story. Stolen passwords, exposed
Similar Vulnerabilities
9.8
CVE-2024-44902Deserialization of untrusted data in Thinkphp
Patch status unknownEPSS %4
-
CVE-2018-20062 Actively exploitedThinkPHP "noneCms" Remote Code Execution Vulnerability
Workaround Public Exploits:2EPSS %100
-
CVE-2019-9082 Actively exploitedThinkPHP Remote Code Execution Vulnerability
Workaround Public Exploits:3EPSS %97
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-47945"