Vulnerability · Published Sep 14, 2020 · Assigned by mitre
CVE-2020-25540
High 7.5
In plain English
A high-severity security flaw in the zoujingli/thinkadmin package (Packagist). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 75.3% (higher than 99.5% of all known vulnerabilities). Ready-made attack tooling exists: Nuclei, public proof-of-concept code.
Severity (CVSS NVD)7.5High
Exploit odds (30 days)75.3%top 0.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling2Nuclei, Public PoC
Official description
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Packagist | zoujingli/thinkadmin | no fix listed | GHSA-2qm5-r82g-5hcx |
Affected products (as reported)
References
- https://github.com/zoujingli/ThinkAdmin/issues/244 x_refsource_MISC
- https://wtfsec.org/posts/thinkadmin-v6-%E5%88%97%E7%9B%AE%E5%BD%95-%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AF%BB%E5%8F%96/ x_refsource_MISC
- http://packetstormsecurity.com/files/159177/ThinkAdmin-6-Arbitrary-File-Read.html x_refsource_MISC