CVE-2024-44902criticalobserved exploitationCWE-502

CVE-2024-44902

70Vexday Risk Score

Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.

ssvc Actcvss 9.8epss 4.2%

from disclosure to weapon0 days

Published on NVDSep 9

1st PoCSep 5

VulnCheck+455d

exploitation probability

4.2%top 10% of all CVEs

observed exploitation

yesVulnCheck

3 public exploit(s)

A deserialization vulnerability in Thinkphp v6.1.3 to v8.0.4 allows attackers to execute arbitrary code.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

public PoCs found — 3

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References