Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Underreporting of framework vulnerabilities (Think framework) #1694

Open
pyroxenites opened this issue Oct 12, 2024 · 1 comment
Open

Underreporting of framework vulnerabilities (Think framework) #1694

pyroxenites opened this issue Oct 12, 2024 · 1 comment
Labels
enhancement New feature or request PHP

Comments

@pyroxenites
Copy link

When I use the tool to perform a scan, I found that if the user-inputted parameters originate from the framework’s request parameters, the bearer will ignore this vulnerability.
image

@pyroxenites pyroxenites added the bug Something isn't working label Oct 12, 2024
@didroe didroe added enhancement New feature or request PHP and removed bug Something isn't working labels Oct 15, 2024
@didroe
Copy link
Contributor

didroe commented Oct 15, 2024

Unfortunately we don't currently support the Think framework, only Symfony.

It's not something we have on our roadmap at the moment I'm afraid, but I'll leave this open as a feature request and we'll update you if that changes.

@gotbadger gotbadger changed the title Underreporting of framework vulnerabilities Underreporting of framework vulnerabilities (Think framework) Nov 1, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request PHP
Projects
None yet
Development

No branches or pull requests

2 participants