Security Advisory

CVE-2024-47049

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-09-17 00:00:00

Last updated 2025-03-18 19:37:41

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.

← Browse all CVEs View on cve.org ↗