{"action":"Upgrade mautic/core to 5.2.3 or later.","affected":[{"fixed":"5.2.3","introduced":"0"}],"component":"mautic/core","cve_ids":["CVE-2024-47051"],"ecosystem":"Packagist","epss":0.01799,"exploited":false,"fixed_versions":["5.2.3"],"ghsa_id":"GHSA-73gx-x7r9-77x2","id":"tcs_01M5KEXMVD6GKYN47Y9BC9YHFF","modified_at":"2025-10-16T21:06:40.481026Z","published_at":"2025-02-26T20:07:45Z","references":["https://osv.dev/vulnerability/GHSA-73gx-x7r9-77x2","https://github.com/mautic/mautic/security/advisories/GHSA-73gx-x7r9-77x2","https://nvd.nist.gov/vuln/detail/CVE-2024-47051","https://github.com/mautic/mautic/commit/75bc488ce98b9c8ec01114984049fc1c42c0cae5","https://github.com/mautic/mautic","https://owasp.org/www-community/attacks/Code_Injection","https://owasp.org/www-community/attacks/Path_Traversal"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-73gx-x7r9-77x2","url":"https://osv.dev/vulnerability/GHSA-73gx-x7r9-77x2"}],"summary":"Mautic allows Remote Code Execution and File Deletion in Asset Uploads"}