An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.
{
"versions": [
{
"introduced": "0"
},
{
"last_affected": "x1.6.0"
},
{
"introduced": "0"
},
{
"last_affected": "x2.1.0"
},
{
"introduced": "0"
},
{
"last_affected": "x2.2.0"
},
{
"introduced": "0"
},
{
"last_affected": "x2.2.1"
},
{
"introduced": "0"
},
{
"last_affected": "x2.2.2"
}
]
}