Skip to content
OpenAdvisories

Archive

29 June 2022

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.1
    CVE-2022-2073 EPSS 11%

    Code Injection in getgrav/grav

    Code Injection in GitHub repository getgrav/grav prior to 1.7.34.

  • Critical 9.8
    CVE-2022-33107 EPSS 24%

    Deserialization of Untrusted Data in topthink/framework

    ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload.