high8.8
CVE-2023-48966
ThinkAdmin arbitrary file upload vulnerability
Impact
An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Zip file.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | zoujingli/thinkadmin | <= 6.1.53 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinkadmin | Thinkadmin | Version 6.1.53 |