CVE-2020-25540 is a high-severity (CVSS 7.5) Path Traversal vulnerability in zoujingli/thinkadmin. 5 public exploit or proof-of-concept references are indexed, so weaponization risk is real. The records list no fixed version yet; check the vendor advisory below and apply the mitigations in the meantime.
ThinkAdmin directory traversal vulnerability
EPSS Exploitation Probability
Probability of exploitation in the next 30 days, from FIRST.org EPSS.
How urgent is this, really
Where this sits among everything scored
Real-World Exposure
zoujingli/thinkadminReal-time download stats are indexed for npm and PyPI packages. This vulnerability affects Packagist packages — download data is not available via public APIs for these ecosystems.
Description
ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.
Affected Packages
| Ecosystem | Package | Vulnerable range | Fix |
|---|---|---|---|
| 🐘Packagist | zoujingli/thinkadmin | all versions | No fix |
Affected Products
thinkadminthinkadminResearch use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.
ThinkAdmin 6 - Arbitrarily File Read
by Hzllaga · Sep 15, 2020
Detection & mitigation playbook
Open-source dependencyDetect
Scan your dependency tree (package-lock.json, pnpm-lock.yaml, requirements.txt, go.sum, etc.) for zoujingli/thinkadmin, including transitive dependencies — a direct dependency you never call can still pull in a vulnerable version.
Remediation status
The records we use list no patched version of zoujingli/thinkadmin for CVE-2020-25540. Check the maintainer's advisory, and where your build allows, override or pin the dependency away from the vulnerable range.
Mitigate without a patch
Resolve every user-supplied path to its canonical form and reject anything that escapes the intended directory, and run the component under an account that has no read or write access outside the directory it legitimately serves.
How to detect CVE-2020-25540
A community-maintained Nuclei template exists for this CVE. You can scan for it directly:
nuclei -id cve-2020-25540 -u https://target- Template
- ThinkAdmin 6 - Local File Inclusion
- Severity
- high
- Impact
- Successful exploitation of this vulnerability can lead to unauthorized access to sensitive files, remote code execution, and potential compromise of the entire system.
- Remediation
- Apply the latest patch or upgrade to a version that is not affected by the vulnerability.
Template by ProjectDiscovery nuclei-templates (geeknik), MIT licensed. View the full template. Scan only systems you are authorised to test.
Frequently Asked Questions
Is CVE-2020-25540 in your dependencies?
Find it across Packagist, including transitive dependencies.