Description
The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value.
High · 7.5
CVE-2025-63889
EUVD-2025-198315GHSA-gg35-v6g4-rw3c
The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file…
Published Nov 20, 2025 · Updated Nov 20, 2025 · Assigned by mitre