{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"5.0.24"}],"component":"topthink/framework","cve_ids":["CVE-2022-25481"],"ecosystem":"Packagist","epss":0.04748,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-69wp-xwm7-69wm","id":"tcs_01M5KEWY3S4X3P7DJSTKSM4P7S","modified_at":"2024-07-03T21:21:33.786567Z","published_at":"2022-03-22T00:00:43Z","references":["https://osv.dev/vulnerability/GHSA-69wp-xwm7-69wm","https://nvd.nist.gov/vuln/detail/CVE-2022-25481","https://github.com/Lyther/VulnDiscover/blob/master/Web/ThinkPHP_InfoLeak.md","https://github.com/top-think/framework"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-69wp-xwm7-69wm","url":"https://osv.dev/vulnerability/GHSA-69wp-xwm7-69wm"}],"summary":"Exposure of Resource to Wrong Sphere in ThinkPHP Framework"}