{"action":"Upgrade contao/core-bundle to 4.13.49 or later.","affected":[{"fixed":"4.13.49","introduced":"4.0.0"},{"fixed":"5.3.15","introduced":"5.0.0"},{"fixed":"5.4.3","introduced":"5.4.0"}],"component":"contao/core-bundle","cve_ids":["CVE-2024-45398"],"ecosystem":"Packagist","epss":0.00532,"exploited":false,"fixed_versions":["4.13.49","5.3.15","5.4.3"],"ghsa_id":"GHSA-vm6r-j788-hjh5","id":"tcs_01M5KF98TKPKS2YW6AGPVA2KVQ","modified_at":"2024-09-17T22:34:10.501676Z","published_at":"2024-09-17T14:58:35Z","references":["https://osv.dev/vulnerability/GHSA-vm6r-j788-hjh5","https://github.com/contao/contao/security/advisories/GHSA-vm6r-j788-hjh5","https://nvd.nist.gov/vuln/detail/CVE-2024-45398","https://github.com/contao/contao/commit/9445d509f12a7f1b68a4794dcc5e3e459b363ebb","https://github.com/contao/contao/commit/a7e39f96ac8fdc281f7caaa96e01deb0e24ac7d3","https://github.com/contao/contao/commit/f3db59ffe5a6c0e1f705b3230ebd5ff16865280e","https://contao.org/en/security-advisories/remote-command-execution-through-file-uploads","https://github.com/contao/contao"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-vm6r-j788-hjh5","url":"https://osv.dev/vulnerability/GHSA-vm6r-j788-hjh5"}],"summary":"Contao affected by remote command execution through file upload"}