Packagist/topthink/thinkphp CVE-2020-20120: critical 9.8, EPSS 1.81%
SQL Injection in topthink/thinkphp
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.2.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m7h5-fjjq-559f
- https://nvd.nist.gov/vuln/detail/CVE-2020-20120
- https://github.com/top-think/thinkphp/issues/553
- https://github.com/top-think/thinkphp
CVE-2020-20120 · published · modified · JSON