CVE-2022-45982: ThinkPHP

Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days.

thinkphp 6.0.0~6.0.13 and 6.1.0~6.1.1 contains a deserialization vulnerability. This vulnerability allows attackers to execute arbitrary code via a crafted payload.

Affected products

• ThinkPHP ThinkPHP: from 6.0.0, up to and including 6.0.13; version 6.1.0 only

Published 2023-02-08. Last modified 2026-06-17.