CVE-2020-25540

ThinkAdmin v6 is affected by a directory traversal vulnerability

published September 14, 2020

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
75%
Percentile
99.5
In the wild
Unconfirmed
What it is

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.75332 · 99.5th percentile
Published
2020-09-14T12:22Z
EPSS history
Timeline
  • 14 SEP 12:22Z
    ThinkAdmin v6 is affected by a directory traversal vulnerability
    cvelistv5