Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-20120
9.8
CRITICALCVSS v3
Published
September 28, 2021
CVSS v2
7.5 HIGH
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ThinkPHP v3.2.3 and below contains a SQL injection vulnerability which is triggered when the array is not passed to the "where" and "query" methods.
GitHub