CVE-2021-36564: Critical severity thinkphp vulnerability
Published Dec 6, 2021
·Updated
ThinkPHP v6.0.8 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\Adapter.php.
Affected Software
2 affected componentsFixes available
composer/topthink/framework<6.0.9
6.0.9
ThinkPHP ThinkPHP=6.0.8
Event History
Dec 6, 2021
CVE Published
via MITRE·08:22 PM
Data Sourced
via MITRE·08:22 PM
Description
Dec 10, 2021
Advisory Published
08:23 PM
Frequently Asked Questions
1
What is the severity of CVE-2021-36564?
CVE-2021-36564 has been classified with a moderate severity due to its deserialization vulnerability.
2
How do I fix CVE-2021-36564?
To mitigate CVE-2021-36564, you should upgrade ThinkPHP from version 6.0.8 to at least 6.0.9.
3
What are the potential risks of CVE-2021-36564?
The vulnerability could allow attackers to exploit deserialization issues, potentially leading to remote code execution.
4
Which versions of ThinkPHP are affected by CVE-2021-36564?
CVE-2021-36564 affects ThinkPHP version 6.0.8.
5
Is CVE-2021-36564 a common vulnerability?
While not extremely common, deserialization vulnerabilities like CVE-2021-36564 are recognized as significant security risks in web applications.