← All advisories

Critical severity9.8NVD Advisory· Published Dec 22, 2021· Updated Jun 17, 2026

CVE-2020-20601

CVE-2020-20601

Description

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.

Affected products

7

Thinkcmf/Thinkcmf7 versions
cpe:2.3:a:thinkcmf:thinkcmf:x1.6.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:thinkcmf:thinkcmf:x1.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:thinkcmf:thinkcmf:x2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:thinkcmf:thinkcmf:x2.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:thinkcmf:thinkcmf:x2.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:thinkcmf:thinkcmf:x2.2.2:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <=X2.2.2

Patches

Vulnerability mechanics

References

1

blog.riskivy.com/thinkcmf-%e6%a1%86%e6%9e%b6%e4%b8%8a%e7%9a%84%e4%bb%bb%e6%84%8f%e5%86%85%e5%ae%b9%e5%8c%85%e5%90%ab%e6%bc%8f%e6%b4%9e/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.