GitHub Advisoryadvisory · Packagist

GHSA-2qm5-r82g-5hcx ThinkAdmin directory traversal vulnerability

HIGH Published 2022-05-24 Modified 2025-05-15 Official page ↗
Aliases
CVE-2020-25540
Ecosystem
Packagist
Packages
zoujingli/thinkadmin
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2024-04-22

Affected packages

• Packagist zoujingli/thinkadmin: 6.0 (no fix yet)

Description

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.

Related

Alias · CVE (1)

  • CVE-2020-25540 ThinkAdmin v6 is affected by a directory traversal vulnerability. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References