7.7
Élevée
CVE-2021-23592 The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure…
Description
The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| topthink/framework 6.0 | premières → < 6.0.12 | 6.0.12 |