CVEs-PoC/2021/CVE-2021-23592.md

CVE-2021-23592

Description

The package topthink/framework before 6.0.12 are vulnerable to Deserialization of Untrusted Data due to insecure unserialize method in the Driver class.

POC

Reference

• https://github.com/top-think/framework/releases/tag/v6.0.12
• https://snyk.io/vuln/SNYK-PHP-TOPTHINKFRAMEWORK-2385695

Github

No PoCs found on GitHub currently.