CVE-2024-44902

CRITICAL CVSS: 9.8 Published: 2024-09-09 Modified: 2026-07-05

Description

A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

Thinkphp Thinkphp

CWE-502, CWE-502