An insecure unserialize vulnerability was discovered in ThinkAdmin versions 4.x through 6.x in app/admin/controller/api/Update.php and app/wechat/controller/api/Push.php, which may lead to arbitrary remote code execution.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| zoujingli/thinkadmin(Packagist) | 4.0 | 6.1.0 | N/A |
CVSS Metrics
