PT-2024-25919 · Thinkphp · Thinkphp

Seryeon + 1 · Published 2024-05-04 · Updated 2025-09-03 · CVE-2024-34467

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ThinkPHP version 8.0.3

Description The issue allows remote attackers to exploit XSS due to inadequate filtering of function argument values in think exception.tpl. Additionally, it enables remote attackers to discover the PHPSESSION cookie because think exception.tpl provides this in an error message for a crafted URI in a GET request.

Recommendations For ThinkPHP version 8.0.3, consider disabling the think exception.tpl template until a patch is available to prevent the disclosure of the PHPSESSION cookie and mitigate the risk of XSS exploitation. Restrict access to error messages that may contain sensitive information to minimize the risk of exploitation. Avoid using crafted URIs in GET requests to the affected think exception.tpl template until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-34467

GHSA-969F-V7JV-PGJ3

Affected Products

Thinkphp

References · 13

• 🔥 https://github.com/top-think/framework/issues/2996 · Exploit
• https://osv.dev/vulnerability/GHSA-969f-v7jv-pgj3 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34467 · Security Note
• https://osv.dev/vulnerability/CVE-2024-34467 · Vendor Advisory
• https://github.com/top-think/framework · Note
• https://github.com/top-think/framework/commit/57d1950a1844ef8d3098ea290032aeb92e2e32c3 · Note
• https://github.com/top-think/framework/commit/403358cd3e510e2fdab63f951930bdd093314eee · Note
• https://github.com/top-think/framework/commit/d3904e51e279c3b72ee206192aeccf9b1cffb534 · Note
• https://twitter.com/VulmonFeeds/status/1786885029290742259 · Twitter Post
• https://t.me/cvenotify/79113 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1787534962440257715 · Twitter Post
• https://t.me/cyberok_news/136 · Telegram Post
• https://twitter.com/CVEnew/status/1787139430551081289 · Twitter Post