CVE-2020-20601

CRITICAL 9.8CVE-2020-20601 · Published 22/12/2021 · updated 17/06/2026

In short

CVE-2020-20601 is a CRITICAL (CVSS 9.8) vulnerability affecting thinkcmf (thinkcmf).
Chance of exploitation in the next 30 days (EPSS): 7.4%, higher than 94.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
thinkcmf thinkcmf	`= x1.6.0= x2.1.0= x2.2.0= x2.2.1= x2.2.2`	No fix yet

An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= x1.6.0= x2.1.0= x2.2.0= x2.2.1= x2.2.2

No fix yet

More vulnerabilities in thinkcmf

See all →