← All advisories

Critical severity9.8NVD Advisory· Published Nov 20, 2025· Updated Jun 17, 2026

CVE-2025-63888

CVE-2025-63888

Description

The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Thinkphp/Thinkphpllm-fuzzy3 versions
<=5.0.24+ 2 more
- (no CPE)range: <=5.0.24
- (no CPE)
- cpe:2.3:a:thinkphp:thinkphp:5.0.24:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

2

gist.github.com/Master-0-0/0bf54cbb335b586b42b0db0db804e7aanvdMitigationThird Party Advisory
www.yuque.com/lcc316/df0kgm/mglhbxltgbmzfh2snvdPermissions Required

News mentions

0

No linked articles in our index yet.