critical9.8
CVE-2022-47945
ThinkPHP Framework vulnerable to remote code execution
Impact
ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (`lang_switch_on=true`). An unauthenticated and remote attacker can exploit this to execute arbitrary operating system commands, as demonstrated by including `pearcmd.php`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | topthink/framework | < 6.0.14 | 6.0.14 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinkphp | Thinkphp | before 6.0.14 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/top-think/framework/commit/c4acb8b4001b98a0078eda25840d33e295a7f099
- https://github.com/top-think/framework/compare/v6.0.13...v6.0.14
- https://tttang.com/archive/1865/
- https://github.com/advisories/GHSA-p4qr-vq2g-22wp
- https://nvd.nist.gov/vuln/detail/CVE-2022-47945
- https://tttang.com/archive/1865