CVE-2025-63889

Currently unrated

Key Information:

Vendor
CVE Published:
20 November 2025

What is CVE-2025-63889?

The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-63889 : File Read Vulnerability in ThinkPHP 5.0.24