CVE-2024-52291
1 advisory.
Packagist/craftcms/cms CVE-2024-52291: high 8.4
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Action: Upgrade craftcms/cms to 4.12.5 or later.
composer require craftcms/cms:5.4.6composer require craftcms/cms:4.12.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0-RC1 | 5.4.6 | - |
| 4.0.0-RC1 | 4.12.5 | - |
Fixed versions
| 5.4.6 | 4.12.5 |
Sources
- osv: GHSA-jrh5-vhr9-qh7q
- https://github.com/craftcms/cms/security/advisories/GHSA-jrh5-vhr9-qh7q
- https://nvd.nist.gov/vuln/detail/CVE-2024-52291
- https://github.com/craftcms/cms
CVE-2024-52291 · published · modified · JSON