← All advisories

High severity8.8NVD Advisory· Published Jul 19, 2024· Updated Jun 17, 2026

CVE-2024-40400

CVE-2024-40400

Description

An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
automad/automadPackagist	< 2.0.0-alpha.5	2.0.0-alpha.5

Affected products

7

Automad/Automad6 versions
cpe:2.3:a:automad:automad:*:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:a:automad:automad:*:*:*:*:*:*:*:*range: <=1.10.9
- cpe:2.3:a:automad:automad:2.0.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:automad:automad:2.0.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:automad:automad:2.0.0:alpha3:*:*:*:*:*:*
- cpe:2.3:a:automad:automad:2.0.0:alpha4:*:*:*:*:*:*
- (no CPE)
ghsa-coords
pkg:composer/automad/automad
Range: < 2.0.0-alpha.5

Patches

Vulnerability mechanics

References

4

github.com/marcantondahmen/automad/issues/106nvdExploitIssue TrackingVendor AdvisoryWEB
github.com/advisories/GHSA-47mc-qmh2-mqj4ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-40400ghsaADVISORY
github.com/marcantondahmen/automad/commit/112f070ccf423931c9bb2b36f9a26c345e1ef56eghsaWEB

News mentions

0

No linked articles in our index yet.