Description (CNA)
The fetch function in file thinkphp\library\think\Template.php in ThinkPHP 5.0.24 allows attackers to read arbitrary files via crafted file path in a template value.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://www.yuque.com/lcc316/df0kgm/xqkrw5rfz5vqxo9t
- https://gist.github.com/Master-0-0/dd63209602f04267f1a27a75a064df26
ADP enrichment
No English description supplied.
No references supplied.