7.7
High
CVE-2021-23592 The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure…
Description
The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| topthink/framework 6.0 | earliest → < 6.0.12 | 6.0.12 |