CVE-2020-25540: Thinkadmin

High severity, CVSS 7.5. EPSS: 75.3% chance of exploitation in the next 30 days.

ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode parameter.

Affected products

• Thinkadmin Thinkadmin: version 6.0 only

Published 2020-09-14. Last modified 2026-06-17.