Thinkphp · Thinkphp · CVE-2022-38352
**Name of the Vulnerable Software and Affected Versions**
ThinkPHP version 6.0.13
**Description**
The issue is related to a deserialization vulnerability via the `LeagueFlysystemCachedStoragePsr6Cache` component. This allows attackers to execute arbitrary code by using a crafted payload.
**Recommendations**
For ThinkPHP version 6.0.13, update to a version that fixes this issue to prevent exploitation. As a temporary workaround, consider disabling the `LeagueFlysystemCachedStoragePsr6Cache` component until a patch is available.