CVE-2025-63888
Critical · 9.8CVSS
9.8
EPSS
0.6%
Published
Nov 20, 2025
CISA due date
—
The record
The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|