{"action":"Upgrade craftcms/cms to 4.12.8 or later.","affected":[{"fixed":"5.4.9","introduced":"5.0.0-alpha.1"},{"fixed":"4.12.8","introduced":"3.5.13"}],"component":"craftcms/cms","cve_ids":["CVE-2024-52292"],"ecosystem":"Packagist","epss":0.00746,"exploited":false,"fixed_versions":["5.4.9","4.12.8"],"ghsa_id":"GHSA-cw6g-qmjq-6w2w","id":"tcs_01M5KF18RC8YDHAE6A2MN03C33","modified_at":"2026-09-10T03:50:20.581733147Z","published_at":"2024-11-13T14:15:39Z","references":["https://osv.dev/vulnerability/GHSA-cw6g-qmjq-6w2w","https://github.com/craftcms/cms/security/advisories/GHSA-cw6g-qmjq-6w2w","https://nvd.nist.gov/vuln/detail/CVE-2024-52292","https://github.com/craftcms/cms"],"severity":{"label":"high","score":7.7},"sources":[{"source":"osv","source_id":"GHSA-cw6g-qmjq-6w2w","url":"https://osv.dev/vulnerability/GHSA-cw6g-qmjq-6w2w"}],"summary":"Craft CMS Arbitrary System File Read"}