Open-source package vulnerability · Composer (PHP)
CVE-2025-50706: ThinkPHP Path Traversal Vulnerability
criticalCVSS 4.0 9.3GHSA-mrwc-mvr8-9xq5
An issue in ThinkPHP Framework v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function.
Published Aug 5, 2025
Affected packages
topthink/framework
- Ecosystem
- Composer (PHP)
- Affected
- <= 5.1.41
- Fixed in
- No patched version yet
- Check
composer show topthink/framework
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
An issue in ThinkPHP Framework v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology