Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2024-34467

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-969f-v7jv-pgj3

ThinkPHP Cross-Site Scripting Vulnerability ThinkPHP 8.0.3 allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think_exception.tpl.

gitlab/packagist/topthink/framework/CVE-2024-34467

ThinkPHP allows remote attackers to discover the PHPSESSION cookie ThinkPHP 8.0.3 allows remote attackers to discover the PHPSESSION cookie because think_exception.tpl (aka the debug error output source code) provides this in an error message for a crafted URI in a GET request.