CVE-2020-25540: Path Traversal
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-25540?
CVE-2020-25540 is a directory traversal vulnerability in ThinkAdmin v6, which allows unauthorized attackers to read arbitrary files on a remote server.
How does CVE-2020-25540 affect ThinkAdmin v6?
CVE-2020-25540 allows unauthorized attackers to read arbitrary files on a remote server by exploiting a directory traversal vulnerability in ThinkAdmin v6.
What is the severity of CVE-2020-25540?
CVE-2020-25540 has a severity rating of high, with a CVSS score of 7.5.
How can an unauthorized attacker exploit CVE-2020-25540?
An unauthorized attacker can exploit CVE-2020-25540 by sending a specially crafted GET request with an encoded parameter to the vulnerable ThinkAdmin v6 application, allowing them to read arbitrary files on the remote server.
Is there a fix available for CVE-2020-25540?
To fix CVE-2020-25540, it is recommended to update ThinkAdmin v6 to a version that addresses the directory traversal vulnerability and apply any patches or security updates provided by the software vendor.