high7.5
CVE-2025-63889
The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template …
Impact
The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinkphp | Thinkphp | Version 5.0.24 |