CVE-2022-33107: ThinkPHP

Critical severity, CVSS 9.8. EPSS: 23.9% chance of exploitation in the next 30 days.

ThinkPHP v6.0.12 was discovered to contain a deserialization vulnerability via the component vendor\league\flysystem-cached-adapter\src\Storage\AbstractCache.php. This vulnerability allows attackers to execute arbitrary code via a crafted payload.

Affected products

• ThinkPHP ThinkPHP: version 6.0.12 only

Published 2022-06-29. Last modified 2026-06-17.