CVE-2020-25540

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

75.33% chance of exploitation in the next 30 days, 100th percentile

Nuclei

high · CWE-22

Published

2020-09-14

Updated

2024-08-04

Proof-of-concept exploits (5)

• RajChowdhury240/ThinkAdmin-CVE-2020-255400★ · 2022-03-09
• Rajchowdhury420/ThinkAdmin-CVE-2020-255400★ · 2022-03-09
• Schira4396/CVE-2020-255407★ · 2022-10-20
• lowkey0808/cve-2020-255400★ · 2022-05-10
• simonlee-hello/CVE-2020-255400★ · 2024-07-11

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25540.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/48812

Exploit collections (1)

• ThinkAdmin未授权列目录任意文件读取(CVE-2020-25540)漏洞helloexp/0day

Security advisories

• http://packetstormsecurity.com/files/159177/ThinkAdmin-6-Arbitrary-File-Read.html
• zoujingli/ThinkAdmin/issues/244
• https://wtfsec.org/posts/thinkadmin-v6-%E5%88%97%E7%9B%AE%E5%BD%95-%E4%BB%BB%E6%84%8F%E6%…
• advisories/GHSA-2qm5-r82g-5hcx

References

• CVE Record
• NVD entry

Related

• CVE-2018-11228
• CVE-2018-13341
• CVE-2020-14645
• CVE-2022-22972
• CVE-2021-32849
• CVE-2021-43857