CVE:CVE-2020-25967
CNNVD:CNNVD-202012-833
fastadmin是一套基于ThinkPHP和Bootstrap的网站后台开发框架。
Fastadmin V1.0.0.20200506 beta存在安全漏洞，攻击者可利用该漏洞造成服务器端模板注入(SST)漏洞的攻击。
solution:Upgrade fastadmin fastadmin to a higher version than 1.0.0.20200506:beta,and avoid the version 1.0.0.20200506:beta