← Database

CVE-2022-33107

CRITICAL CVSS: 9.8 Published: 2022-06-29 Modified: 2026-06-17

Description

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload.

Affected Platforms

Thinkphp Thinkphp

Weakness Type

CWE-502

References