{"action":"Upgrade livewire/livewire to 2.12.7 or later.","affected":[{"fixed":"3.5.2","introduced":"3.0.0-beta.1"},{"fixed":"2.12.7","introduced":"0"}],"component":"livewire/livewire","cve_ids":["CVE-2024-47823"],"ecosystem":"Packagist","epss":0.00846,"exploited":false,"fixed_versions":["3.5.2","2.12.7"],"ghsa_id":"GHSA-f3cx-396f-7jqp","id":"tcs_01M5KF1CRTQ7TS766FC69BDGFD","modified_at":"2024-10-10T00:26:20.747314Z","published_at":"2024-10-08T22:19:16Z","references":["https://osv.dev/vulnerability/GHSA-f3cx-396f-7jqp","https://github.com/livewire/livewire/security/advisories/GHSA-f3cx-396f-7jqp","https://nvd.nist.gov/vuln/detail/CVE-2024-47823","https://github.com/livewire/livewire/pull/8624","https://github.com/livewire/livewire/commit/70503b79f5db75a1eac9bf55826038a6ee5a16d5","https://github.com/livewire/livewire/commit/cd168c6212ea13d13b82b3132485741f82d9fad9","https://github.com/livewire/livewire"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-f3cx-396f-7jqp","url":"https://osv.dev/vulnerability/GHSA-f3cx-396f-7jqp"}],"summary":"Livewire Remote Code Execution on File Uploads"}