CVE-2024-52291
Description
Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
craftcms/cmsPackagist | >= 5.0.0-RC1, < 5.4.6 | 5.4.6 |
craftcms/cmsPackagist | >= 4.0.0-RC1, < 4.12.5 | 4.12.5 |
Affected products
7cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:craftcms:craft_cms:*:*:*:*:*:*:*:*range: >4.0.0,<4.12.5
- cpe:2.3:a:craftcms:craft_cms:4.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:craftcms:craft_cms:4.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:craftcms:craft_cms:4.0.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:craftcms:craft_cms:5.0.0:rc1:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
3- github.com/craftcms/cms/security/advisories/GHSA-jrh5-vhr9-qh7qnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-jrh5-vhr9-qh7qghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2024-52291ghsaADVISORY
News mentions
0No linked articles in our index yet.