{"action":"Upgrade craftcms/cms to 4.12.5 or later.","affected":[{"fixed":"5.4.6","introduced":"5.0.0-RC1"},{"fixed":"4.12.5","introduced":"4.0.0-RC1"}],"component":"craftcms/cms","cve_ids":["CVE-2024-52291"],"ecosystem":"Packagist","epss":0.01253,"exploited":false,"fixed_versions":["5.4.6","4.12.5"],"ghsa_id":"GHSA-jrh5-vhr9-qh7q","id":"tcs_01M5KF4VSG5Y0TYYH6QNKPEEBH","modified_at":"2024-11-13T19:08:27.244213Z","published_at":"2024-11-13T14:12:36Z","references":["https://osv.dev/vulnerability/GHSA-jrh5-vhr9-qh7q","https://github.com/craftcms/cms/security/advisories/GHSA-jrh5-vhr9-qh7q","https://nvd.nist.gov/vuln/detail/CVE-2024-52291","https://github.com/craftcms/cms"],"severity":{"label":"high","score":8.4},"sources":[{"source":"osv","source_id":"GHSA-jrh5-vhr9-qh7q","url":"https://osv.dev/vulnerability/GHSA-jrh5-vhr9-qh7q"}],"summary":"Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution"}