← Back

Czim

czim

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
File Handling
file-handling
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-47049
1Czim
1File Handling
Mar 18, 2025
Sep 17, 2024
N/A· v4
8.2 HIGH· v3
N/A· v2
The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of...Show more
The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.Show less