CVE-2024-48112

CRITICAL CVSS: 9.8 Published: 2024-10-30 Modified: 2026-06-17

Description

A deserialization vulnerability in the component \controller\Index.php of Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

Affected Platforms

Thinkphp Thinkphp

Weakness Type

CWE-502

References