CVE-2024-47049 - Czim/File-Handling SSRF and Directory Traversal Vulnerability

2 months ago 30
ARTICLE AD BOX
CVE ID : CVE-2024-47049
Published : Sept. 17, 2024, 2:15 p.m. | 24 minutes ago
Description : The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Read Entire Article