CVE-2024-47051
1 advisory.
Packagist/mautic/core CVE-2024-47051: critical 9.1, EPSS 1.80%
Mautic allows Remote Code Execution and File Deletion in Asset Uploads
Action: Upgrade mautic/core to 5.2.3 or later.
composer require mautic/core:5.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.2.3 | - |
Fixed versions
| 5.2.3 |
Sources
- osv: GHSA-73gx-x7r9-77x2
- https://github.com/mautic/mautic/security/advisories/GHSA-73gx-x7r9-77x2
- https://nvd.nist.gov/vuln/detail/CVE-2024-47051
- https://github.com/mautic/mautic/commit/75bc488ce98b9c8ec01114984049fc1c42c0cae5
- https://github.com/mautic/mautic
- https://owasp.org/www-community/attacks/Code_Injection
- https://owasp.org/www-community/attacks/Path_Traversal
CVE-2024-47051 · published · modified · JSON