← All advisories

Critical severity9.8NVD Advisory· Published Apr 25, 2024· Updated Jun 17, 2026

CVE-2024-31615

CVE-2024-31615

Description

ThinkCMF 6.0.9 is vulnerable to File upload via UeditorController.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Thinkcmf/Thinkcmf3 versions
cpe:2.3:a:thinkcmf:thinkcmf:6.0.9:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:thinkcmf:thinkcmf:6.0.9:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =6.0.9

Patches

Vulnerability mechanics

References

1

github.com/huajiuqi/bug/blob/main/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.