{"action":"Upgrade statamic/cms to 5.17.0 or later.","affected":[{"fixed":"5.17.0","introduced":"0"}],"component":"statamic/cms","cve_ids":["CVE-2024-52600"],"ecosystem":"Packagist","epss":0.00576,"exploited":false,"fixed_versions":["5.17.0"],"ghsa_id":"GHSA-p7f6-8mcm-fwv3","id":"tcs_01M5KF65TP7DRA1TZ2ZBHVZEYH","modified_at":"2024-11-19T21:02:13.930750Z","published_at":"2024-11-19T18:03:07Z","references":["https://osv.dev/vulnerability/GHSA-p7f6-8mcm-fwv3","https://github.com/statamic/cms/security/advisories/GHSA-p7f6-8mcm-fwv3","https://nvd.nist.gov/vuln/detail/CVE-2024-52600","https://github.com/statamic/cms/commit/0c07c10009a2439c8ee56c8faefd1319dc6e388d","https://github.com/statamic/cms/commit/400875b20f40e1343699d536a432a6fc284346da","https://github.com/statamic/cms/commit/4cc2c9bd0f39a93b3fc7e9ef0f12792576fd380d","https://github.com/statamic/cms"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-p7f6-8mcm-fwv3","url":"https://osv.dev/vulnerability/GHSA-p7f6-8mcm-fwv3"}],"summary":"Statamic CMS has a Path Traversal in Asset Upload"}