Security Advisory

CVE-2025-63889

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-11-20 00:00:00
Last updated 2025-11-20 21:48:21
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value.