ThinkPHP 8.0.3 vulnerability allows remote attackers to discover PHPSESSION cookie
CVE-2024-34467

Currently unrated

Key Information:

Vendor: ThinkPHP
Status: ThinkPHP
Vendor: CVE Published:; 4 May 2024

What is CVE-2024-34467?

ThinkPHP 8.0.3 allows remote attackers to discover the PHPSESSION cookie because think_exception.tpl (aka the debug error output source code) provides this in an error message for a crafted URI in a GET request.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/top-think/framework/issues/2996

Timeline

Vulnerability published
May 4, 2024
Vulnerability Reserved
May 4, 2024

JSON

ThinkPHP

What is CVE-2024-34467?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.