Access Control Bypass Affecting craftcms/cms package, versions >=4.0.0-RC1, <4.12.5 >=5.0.0-RC1, <5.4.6
Threat Intelligence
Exploit Maturity
Proof of concept
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-CRAFTCMSCMS-8379632
- published 14 Nov 2024
- disclosed 13 Nov 2024
- credit Winslow
Introduced: 13 Nov 2024
New CVE-2024-52291 Open this link in a new tabHow to fix?
Upgrade craftcms/cms to version 4.12.5, 5.4.6 or higher.
Overview
craftcms/cms is a content management system.
Affected versions of this package are vulnerable to Access Control Bypass through the normalizePath function, by utilizing a double file:// scheme to bypass local file system validation.
Note: This is only exploitable if the administrator has an authenticated account with allowAdminChanges enabled.