EXPOSURES › CVE-2024-44902
CVE-2024-44902
CRITICAL
DETAIL
SourceNVD · cve
Published2024-09-09
CVSS9.8
Referencehttps://nvd.nist.gov/vuln/detail/CVE-2024-44902 ↗
⚡ RCE
◐ ZERO-DAY
SHAME 50/100
rcezero-day
A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
▸ RECOMMENDED ACTION Remote code execution — patch the affected products on priority.
PLAYERS IMPLICATED
DESCRIPTION
A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.