CVE-2024-45398

Packagist/contao/core-bundle CVE-2024-45398: high 8.3

Contao affected by remote command execution through file upload

Action: Upgrade contao/core-bundle to 4.13.49 or later.

composer require contao/core-bundle:4.13.49

composer require contao/core-bundle:5.3.15

composer require contao/core-bundle:5.4.3

Affected

Fixed versions

Sources

• osv: GHSA-vm6r-j788-hjh5
• https://github.com/contao/contao/security/advisories/GHSA-vm6r-j788-hjh5
• https://nvd.nist.gov/vuln/detail/CVE-2024-45398
• https://github.com/contao/contao/commit/9445d509f12a7f1b68a4794dcc5e3e459b363ebb
• https://github.com/contao/contao/commit/a7e39f96ac8fdc281f7caaa96e01deb0e24ac7d3
• https://github.com/contao/contao/commit/f3db59ffe5a6c0e1f705b3230ebd5ff16865280e
• https://contao.org/en/security-advisories/remote-command-execution-through-file-uploads
• https://github.com/contao/contao

CVE-2024-45398 · published 2024-09-17T14:58:35Z · modified 2024-09-17T22:34:10.501676Z · JSON