{"action":"Upgrade craftcms/cms to 4.12.2 or later.","affected":[{"fixed":"4.12.2","introduced":"4.0.0-RC1"},{"fixed":"5.4.3","introduced":"5.0.0-RC1"}],"component":"craftcms/cms","cve_ids":["CVE-2024-52293"],"ecosystem":"Packagist","epss":0.01358,"exploited":false,"fixed_versions":["4.12.2","5.4.3"],"ghsa_id":"GHSA-f3cw-hg6r-chfv","id":"tcs_01M5KF1CQ15AGHNDJJ6JA4X87W","modified_at":"2026-02-04T03:25:14.221971Z","published_at":"2024-11-13T14:16:38Z","references":["https://osv.dev/vulnerability/GHSA-f3cw-hg6r-chfv","https://github.com/craftcms/cms/security/advisories/GHSA-f3cw-hg6r-chfv","https://nvd.nist.gov/vuln/detail/CVE-2024-52293","https://github.com/craftcms/cms/commit/123e48a696de1e2f63ab519d4730eb3b87beaa58","https://github.com/craftcms/cms"],"severity":{"label":"high","score":7.2},"sources":[{"source":"osv","source_id":"GHSA-f3cw-hg6r-chfv","url":"https://osv.dev/vulnerability/GHSA-f3cw-hg6r-chfv"}],"summary":"Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI"}