~ / search / GHSA-cxv7-6jgf-7gwf

GHSA-cxv7-6jgf-7gwf

ThinkAdmin Admin Panel Access using Default Credentials

Source: GitHub Advisory Database (reviewed) High CVE-2020-35296

Packages

EcosystemPackageAffectedFixed in
Packagist zoujingli/thinkadmin 6.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

ThinkAdmin v6 has default administrator credentials, which allows attackers to gain unrestricted administratior dashboard access.

References

External links from the advisory. They lead to third-party sites.