CVE-2025-63888

Critical

Published: 20/11/2025(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

The read function in thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.

Remote code execution could allow an attacker to fully compromise the server and compromise data confidentiality, integrity, and availability.

Immediately update ThinkPHP to a patched version and review logs for unauthorized activity.

Original NVD description (English source)

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.