Vulnerability Details CVE-2024-44902
A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.726
EPSS Ranking 98.7%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2024-44902
-
cpe:2.3:a:thinkphp:thinkphp:6.1.3
-
cpe:2.3:a:thinkphp:thinkphp:6.1.4
-
cpe:2.3:a:thinkphp:thinkphp:6.1.5
-
cpe:2.3:a:thinkphp:thinkphp:8.0.0
-
cpe:2.3:a:thinkphp:thinkphp:8.0.1
-
cpe:2.3:a:thinkphp:thinkphp:8.0.2
-
cpe:2.3:a:thinkphp:thinkphp:8.0.3
-
cpe:2.3:a:thinkphp:thinkphp:8.0.4