Twothink Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Twothink Project records in CISA KEV

No Twothink Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Twothink · all components

TI-2020-13294 CVE-2020-17952 · GHSA-ch3r-vp46-8g22

MEDIUM 47

A remote code execution (RCE) vulnerability in /library/think/App.php of Twothink v2.0 allows attackers to execute arbitrary PHP code.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02474 Published 2021-07-26 No fix listed CWE-74