CVE-2024-47049
1 advisory.
Packagist/czim/file-handling CVE-2024-47049: high 8.2
czim/file-handling vulnerable to SSRF and directory traversal
Action: Upgrade czim/file-handling to 1.5.0 or later.
composer require czim/file-handling:1.5.0composer require czim/file-handling:2.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.0 | - |
| 2.0.0 | 2.3.0 | - |
Fixed versions
| 1.5.0 | 2.3.0 |
Sources
- osv: GHSA-6rgh-r6j3-3223
- https://nvd.nist.gov/vuln/detail/CVE-2024-47049
- https://github.com/czim/file-handling/commit/95dfda850536bf35e684619598b9d02f4c97680d
- https://github.com/czim/file-handling/commit/dcf879896efe3457f51af9c8eab9f70dfc709a99
- https://github.com/czim/file-handling
- https://github.com/czim/file-handling/blob/2.3.0/SECURITY.md
CVE-2024-47049 · published · modified · JSON