CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-52291

Craft is a content management system (CMS). A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme (e.g., file://file:////). This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads, unauthorized access to sensitive files, and, under certain conditions, remote code execution (RCE) via Server-Side Template Injection (SSTI) payloads. Note that this will only work if you have an authenticated administrator account with allowAdminChanges enabled. This is fixed in 5.4.6 and 4.12.5.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 30.3%

CVSS Severity

CVSS v3 Score 8.4

References

https://github.com/craftcms/cms/security/advisories/GHSA-jrh5-vhr9-qh7q

Products affected by CVE-2024-52291

Craftcms » Craft Cms » Version: 4.0.0

cpe:2.3:a:craftcms:craft_cms:4.0.0
Craftcms » Craft Cms » Version: 4.0.0.1

cpe:2.3:a:craftcms:craft_cms:4.0.0.1
Craftcms » Craft Cms » Version: 4.0.1

cpe:2.3:a:craftcms:craft_cms:4.0.1
Craftcms » Craft Cms » Version: 4.0.2

cpe:2.3:a:craftcms:craft_cms:4.0.2
Craftcms » Craft Cms » Version: 4.0.3

cpe:2.3:a:craftcms:craft_cms:4.0.3
Craftcms » Craft Cms » Version: 4.0.4

cpe:2.3:a:craftcms:craft_cms:4.0.4
Craftcms » Craft Cms » Version: 4.0.5

cpe:2.3:a:craftcms:craft_cms:4.0.5
Craftcms » Craft Cms » Version: 4.0.5.1

cpe:2.3:a:craftcms:craft_cms:4.0.5.1
Craftcms » Craft Cms » Version: 4.0.5.2

cpe:2.3:a:craftcms:craft_cms:4.0.5.2
Craftcms » Craft Cms » Version: 4.0.6

cpe:2.3:a:craftcms:craft_cms:4.0.6
Craftcms » Craft Cms » Version: 4.1.0

cpe:2.3:a:craftcms:craft_cms:4.1.0
Craftcms » Craft Cms » Version: 4.1.0.1

cpe:2.3:a:craftcms:craft_cms:4.1.0.1
Craftcms » Craft Cms » Version: 4.1.0.2

cpe:2.3:a:craftcms:craft_cms:4.1.0.2
Craftcms » Craft Cms » Version: 4.1.1

cpe:2.3:a:craftcms:craft_cms:4.1.1
Craftcms » Craft Cms » Version: 4.1.2

cpe:2.3:a:craftcms:craft_cms:4.1.2
Craftcms » Craft Cms » Version: 4.1.3

cpe:2.3:a:craftcms:craft_cms:4.1.3
Craftcms » Craft Cms » Version: 4.1.4

cpe:2.3:a:craftcms:craft_cms:4.1.4
Craftcms » Craft Cms » Version: 4.1.4.1

cpe:2.3:a:craftcms:craft_cms:4.1.4.1
Craftcms » Craft Cms » Version: 4.10.0

cpe:2.3:a:craftcms:craft_cms:4.10.0
Craftcms » Craft Cms » Version: 4.10.1

cpe:2.3:a:craftcms:craft_cms:4.10.1
Craftcms » Craft Cms » Version: 4.10.2

cpe:2.3:a:craftcms:craft_cms:4.10.2
Craftcms » Craft Cms » Version: 4.10.3

cpe:2.3:a:craftcms:craft_cms:4.10.3
Craftcms » Craft Cms » Version: 4.10.4

cpe:2.3:a:craftcms:craft_cms:4.10.4
Craftcms » Craft Cms » Version: 4.10.5

cpe:2.3:a:craftcms:craft_cms:4.10.5
Craftcms » Craft Cms » Version: 4.10.6

cpe:2.3:a:craftcms:craft_cms:4.10.6
Craftcms » Craft Cms » Version: 4.10.7

cpe:2.3:a:craftcms:craft_cms:4.10.7
Craftcms » Craft Cms » Version: 4.10.8

cpe:2.3:a:craftcms:craft_cms:4.10.8
Craftcms » Craft Cms » Version: 4.11.0

cpe:2.3:a:craftcms:craft_cms:4.11.0
Craftcms » Craft Cms » Version: 4.11.0.1

cpe:2.3:a:craftcms:craft_cms:4.11.0.1
Craftcms » Craft Cms » Version: 4.11.0.2

cpe:2.3:a:craftcms:craft_cms:4.11.0.2
Craftcms » Craft Cms » Version: 4.11.1

cpe:2.3:a:craftcms:craft_cms:4.11.1
Craftcms » Craft Cms » Version: 4.11.2

cpe:2.3:a:craftcms:craft_cms:4.11.2
Craftcms » Craft Cms » Version: 4.11.3

cpe:2.3:a:craftcms:craft_cms:4.11.3
Craftcms » Craft Cms » Version: 4.11.4

cpe:2.3:a:craftcms:craft_cms:4.11.4
Craftcms » Craft Cms » Version: 4.11.5

cpe:2.3:a:craftcms:craft_cms:4.11.5
Craftcms » Craft Cms » Version: 4.12.0

cpe:2.3:a:craftcms:craft_cms:4.12.0
Craftcms » Craft Cms » Version: 4.12.1

cpe:2.3:a:craftcms:craft_cms:4.12.1
Craftcms » Craft Cms » Version: 4.12.2

cpe:2.3:a:craftcms:craft_cms:4.12.2
Craftcms » Craft Cms » Version: 4.12.3

cpe:2.3:a:craftcms:craft_cms:4.12.3
Craftcms » Craft Cms » Version: 4.12.4

cpe:2.3:a:craftcms:craft_cms:4.12.4
Craftcms » Craft Cms » Version: 4.12.4.1

cpe:2.3:a:craftcms:craft_cms:4.12.4.1
Craftcms » Craft Cms » Version: 4.2.0

cpe:2.3:a:craftcms:craft_cms:4.2.0
Craftcms » Craft Cms » Version: 4.2.0.1

cpe:2.3:a:craftcms:craft_cms:4.2.0.1
Craftcms » Craft Cms » Version: 4.2.0.2

cpe:2.3:a:craftcms:craft_cms:4.2.0.2
Craftcms » Craft Cms » Version: 4.2.1

cpe:2.3:a:craftcms:craft_cms:4.2.1
Craftcms » Craft Cms » Version: 4.2.1.1

cpe:2.3:a:craftcms:craft_cms:4.2.1.1
Craftcms » Craft Cms » Version: 4.2.2

cpe:2.3:a:craftcms:craft_cms:4.2.2
Craftcms » Craft Cms » Version: 4.2.3

cpe:2.3:a:craftcms:craft_cms:4.2.3
Craftcms » Craft Cms » Version: 4.2.4

cpe:2.3:a:craftcms:craft_cms:4.2.4
Craftcms » Craft Cms » Version: 4.2.5

cpe:2.3:a:craftcms:craft_cms:4.2.5
Craftcms » Craft Cms » Version: 4.2.5.1

cpe:2.3:a:craftcms:craft_cms:4.2.5.1
Craftcms » Craft Cms » Version: 4.2.5.2

cpe:2.3:a:craftcms:craft_cms:4.2.5.2
Craftcms » Craft Cms » Version: 4.2.6

cpe:2.3:a:craftcms:craft_cms:4.2.6
Craftcms » Craft Cms » Version: 4.2.7

cpe:2.3:a:craftcms:craft_cms:4.2.7
Craftcms » Craft Cms » Version: 4.2.8

cpe:2.3:a:craftcms:craft_cms:4.2.8
Craftcms » Craft Cms » Version: 4.3.0

cpe:2.3:a:craftcms:craft_cms:4.3.0
Craftcms » Craft Cms » Version: 4.3.1

cpe:2.3:a:craftcms:craft_cms:4.3.1
Craftcms » Craft Cms » Version: 4.3.10

cpe:2.3:a:craftcms:craft_cms:4.3.10
Craftcms » Craft Cms » Version: 4.3.11

cpe:2.3:a:craftcms:craft_cms:4.3.11
Craftcms » Craft Cms » Version: 4.3.2

cpe:2.3:a:craftcms:craft_cms:4.3.2
Craftcms » Craft Cms » Version: 4.3.2.1

cpe:2.3:a:craftcms:craft_cms:4.3.2.1
Craftcms » Craft Cms » Version: 4.3.3

cpe:2.3:a:craftcms:craft_cms:4.3.3
Craftcms » Craft Cms » Version: 4.3.4

cpe:2.3:a:craftcms:craft_cms:4.3.4
Craftcms » Craft Cms » Version: 4.3.5

cpe:2.3:a:craftcms:craft_cms:4.3.5
Craftcms » Craft Cms » Version: 4.3.6

cpe:2.3:a:craftcms:craft_cms:4.3.6
Craftcms » Craft Cms » Version: 4.3.6.1

cpe:2.3:a:craftcms:craft_cms:4.3.6.1
Craftcms » Craft Cms » Version: 4.3.7

cpe:2.3:a:craftcms:craft_cms:4.3.7
Craftcms » Craft Cms » Version: 4.3.7.1

cpe:2.3:a:craftcms:craft_cms:4.3.7.1
Craftcms » Craft Cms » Version: 4.3.8

cpe:2.3:a:craftcms:craft_cms:4.3.8
Craftcms » Craft Cms » Version: 4.3.8.1

cpe:2.3:a:craftcms:craft_cms:4.3.8.1
Craftcms » Craft Cms » Version: 4.3.8.2

cpe:2.3:a:craftcms:craft_cms:4.3.8.2
Craftcms » Craft Cms » Version: 4.3.9

cpe:2.3:a:craftcms:craft_cms:4.3.9
Craftcms » Craft Cms » Version: 4.4.0

cpe:2.3:a:craftcms:craft_cms:4.4.0
Craftcms » Craft Cms » Version: 4.4.1

cpe:2.3:a:craftcms:craft_cms:4.4.1
Craftcms » Craft Cms » Version: 4.4.10

cpe:2.3:a:craftcms:craft_cms:4.4.10
Craftcms » Craft Cms » Version: 4.4.10.1

cpe:2.3:a:craftcms:craft_cms:4.4.10.1
Craftcms » Craft Cms » Version: 4.4.11

cpe:2.3:a:craftcms:craft_cms:4.4.11
Craftcms » Craft Cms » Version: 4.4.12

cpe:2.3:a:craftcms:craft_cms:4.4.12
Craftcms » Craft Cms » Version: 4.4.13

cpe:2.3:a:craftcms:craft_cms:4.4.13
Craftcms » Craft Cms » Version: 4.4.15

cpe:2.3:a:craftcms:craft_cms:4.4.15
Craftcms » Craft Cms » Version: 4.4.2

cpe:2.3:a:craftcms:craft_cms:4.4.2
Craftcms » Craft Cms » Version: 4.4.3

cpe:2.3:a:craftcms:craft_cms:4.4.3
Craftcms » Craft Cms » Version: 4.4.4

cpe:2.3:a:craftcms:craft_cms:4.4.4
Craftcms » Craft Cms » Version: 4.4.5

cpe:2.3:a:craftcms:craft_cms:4.4.5
Craftcms » Craft Cms » Version: 4.4.6

cpe:2.3:a:craftcms:craft_cms:4.4.6
Craftcms » Craft Cms » Version: 4.4.6.1

cpe:2.3:a:craftcms:craft_cms:4.4.6.1
Craftcms » Craft Cms » Version: 4.4.7

cpe:2.3:a:craftcms:craft_cms:4.4.7
Craftcms » Craft Cms » Version: 4.4.7.1

cpe:2.3:a:craftcms:craft_cms:4.4.7.1
Craftcms » Craft Cms » Version: 4.4.8

cpe:2.3:a:craftcms:craft_cms:4.4.8
Craftcms » Craft Cms » Version: 4.4.9

cpe:2.3:a:craftcms:craft_cms:4.4.9
Craftcms » Craft Cms » Version: 4.5.1

cpe:2.3:a:craftcms:craft_cms:4.5.1
Craftcms » Craft Cms » Version: 4.5.10

cpe:2.3:a:craftcms:craft_cms:4.5.10
Craftcms » Craft Cms » Version: 4.5.11

cpe:2.3:a:craftcms:craft_cms:4.5.11
Craftcms » Craft Cms » Version: 4.5.11.1

cpe:2.3:a:craftcms:craft_cms:4.5.11.1
Craftcms » Craft Cms » Version: 4.5.12

cpe:2.3:a:craftcms:craft_cms:4.5.12
Craftcms » Craft Cms » Version: 4.5.13

cpe:2.3:a:craftcms:craft_cms:4.5.13
Craftcms » Craft Cms » Version: 4.5.14

cpe:2.3:a:craftcms:craft_cms:4.5.14
Craftcms » Craft Cms » Version: 4.5.15

cpe:2.3:a:craftcms:craft_cms:4.5.15
Craftcms » Craft Cms » Version: 4.5.2

cpe:2.3:a:craftcms:craft_cms:4.5.2
Craftcms » Craft Cms » Version: 4.5.3

cpe:2.3:a:craftcms:craft_cms:4.5.3
Craftcms » Craft Cms » Version: 4.5.4

cpe:2.3:a:craftcms:craft_cms:4.5.4
Craftcms » Craft Cms » Version: 4.5.5

cpe:2.3:a:craftcms:craft_cms:4.5.5
Craftcms » Craft Cms » Version: 4.5.6

cpe:2.3:a:craftcms:craft_cms:4.5.6
Craftcms » Craft Cms » Version: 4.5.7

cpe:2.3:a:craftcms:craft_cms:4.5.7
Craftcms » Craft Cms » Version: 4.5.8

cpe:2.3:a:craftcms:craft_cms:4.5.8
Craftcms » Craft Cms » Version: 4.5.9

cpe:2.3:a:craftcms:craft_cms:4.5.9
Craftcms » Craft Cms » Version: 4.6.0

cpe:2.3:a:craftcms:craft_cms:4.6.0
Craftcms » Craft Cms » Version: 4.6.1

cpe:2.3:a:craftcms:craft_cms:4.6.1
Craftcms » Craft Cms » Version: 4.6.1.1

cpe:2.3:a:craftcms:craft_cms:4.6.1.1
Craftcms » Craft Cms » Version: 4.7.0

cpe:2.3:a:craftcms:craft_cms:4.7.0
Craftcms » Craft Cms » Version: 4.7.1

cpe:2.3:a:craftcms:craft_cms:4.7.1
Craftcms » Craft Cms » Version: 4.7.2

cpe:2.3:a:craftcms:craft_cms:4.7.2
Craftcms » Craft Cms » Version: 4.7.2.1

cpe:2.3:a:craftcms:craft_cms:4.7.2.1
Craftcms » Craft Cms » Version: 4.7.3

cpe:2.3:a:craftcms:craft_cms:4.7.3
Craftcms » Craft Cms » Version: 4.7.4

cpe:2.3:a:craftcms:craft_cms:4.7.4
Craftcms » Craft Cms » Version: 4.8.0

cpe:2.3:a:craftcms:craft_cms:4.8.0
Craftcms » Craft Cms » Version: 4.8.1

cpe:2.3:a:craftcms:craft_cms:4.8.1
Craftcms » Craft Cms » Version: 4.8.10

cpe:2.3:a:craftcms:craft_cms:4.8.10
Craftcms » Craft Cms » Version: 4.8.11

cpe:2.3:a:craftcms:craft_cms:4.8.11
Craftcms » Craft Cms » Version: 4.8.2

cpe:2.3:a:craftcms:craft_cms:4.8.2
Craftcms » Craft Cms » Version: 4.8.3

cpe:2.3:a:craftcms:craft_cms:4.8.3
Craftcms » Craft Cms » Version: 4.8.4

cpe:2.3:a:craftcms:craft_cms:4.8.4
Craftcms » Craft Cms » Version: 4.8.5

cpe:2.3:a:craftcms:craft_cms:4.8.5
Craftcms » Craft Cms » Version: 4.8.6

cpe:2.3:a:craftcms:craft_cms:4.8.6
Craftcms » Craft Cms » Version: 4.8.7

cpe:2.3:a:craftcms:craft_cms:4.8.7
Craftcms » Craft Cms » Version: 4.8.8

cpe:2.3:a:craftcms:craft_cms:4.8.8
Craftcms » Craft Cms » Version: 4.8.9

cpe:2.3:a:craftcms:craft_cms:4.8.9
Craftcms » Craft Cms » Version: 4.9.0

cpe:2.3:a:craftcms:craft_cms:4.9.0
Craftcms » Craft Cms » Version: 4.9.1

cpe:2.3:a:craftcms:craft_cms:4.9.1
Craftcms » Craft Cms » Version: 4.9.2

cpe:2.3:a:craftcms:craft_cms:4.9.2
Craftcms » Craft Cms » Version: 4.9.3

cpe:2.3:a:craftcms:craft_cms:4.9.3
Craftcms » Craft Cms » Version: 4.9.4

cpe:2.3:a:craftcms:craft_cms:4.9.4
Craftcms » Craft Cms » Version: 4.9.5

cpe:2.3:a:craftcms:craft_cms:4.9.5
Craftcms » Craft Cms » Version: 4.9.6

cpe:2.3:a:craftcms:craft_cms:4.9.6
Craftcms » Craft Cms » Version: 4.9.7

cpe:2.3:a:craftcms:craft_cms:4.9.7
Craftcms » Craft Cms » Version: 5.0.0

cpe:2.3:a:craftcms:craft_cms:5.0.0
Craftcms » Craft Cms » Version: 5.0.1

cpe:2.3:a:craftcms:craft_cms:5.0.1
Craftcms » Craft Cms » Version: 5.0.2

cpe:2.3:a:craftcms:craft_cms:5.0.2
Craftcms » Craft Cms » Version: 5.0.3

cpe:2.3:a:craftcms:craft_cms:5.0.3
Craftcms » Craft Cms » Version: 5.0.4

cpe:2.3:a:craftcms:craft_cms:5.0.4
Craftcms » Craft Cms » Version: 5.0.5

cpe:2.3:a:craftcms:craft_cms:5.0.5
Craftcms » Craft Cms » Version: 5.0.6

cpe:2.3:a:craftcms:craft_cms:5.0.6
Craftcms » Craft Cms » Version: 5.1.0

cpe:2.3:a:craftcms:craft_cms:5.1.0
Craftcms » Craft Cms » Version: 5.1.1

cpe:2.3:a:craftcms:craft_cms:5.1.1
Craftcms » Craft Cms » Version: 5.1.10

cpe:2.3:a:craftcms:craft_cms:5.1.10
Craftcms » Craft Cms » Version: 5.1.2

cpe:2.3:a:craftcms:craft_cms:5.1.2
Craftcms » Craft Cms » Version: 5.1.3

cpe:2.3:a:craftcms:craft_cms:5.1.3
Craftcms » Craft Cms » Version: 5.1.4

cpe:2.3:a:craftcms:craft_cms:5.1.4
Craftcms » Craft Cms » Version: 5.1.5

cpe:2.3:a:craftcms:craft_cms:5.1.5
Craftcms » Craft Cms » Version: 5.1.6

cpe:2.3:a:craftcms:craft_cms:5.1.6
Craftcms » Craft Cms » Version: 5.1.7

cpe:2.3:a:craftcms:craft_cms:5.1.7
Craftcms » Craft Cms » Version: 5.1.8

cpe:2.3:a:craftcms:craft_cms:5.1.8
Craftcms » Craft Cms » Version: 5.1.9

cpe:2.3:a:craftcms:craft_cms:5.1.9
Craftcms » Craft Cms » Version: 5.2.0

cpe:2.3:a:craftcms:craft_cms:5.2.0
Craftcms » Craft Cms » Version: 5.2.1

cpe:2.3:a:craftcms:craft_cms:5.2.1
Craftcms » Craft Cms » Version: 5.2.10

cpe:2.3:a:craftcms:craft_cms:5.2.10
Craftcms » Craft Cms » Version: 5.2.2

cpe:2.3:a:craftcms:craft_cms:5.2.2
Craftcms » Craft Cms » Version: 5.2.3

cpe:2.3:a:craftcms:craft_cms:5.2.3
Craftcms » Craft Cms » Version: 5.2.4

cpe:2.3:a:craftcms:craft_cms:5.2.4
Craftcms » Craft Cms » Version: 5.2.4.1

cpe:2.3:a:craftcms:craft_cms:5.2.4.1
Craftcms » Craft Cms » Version: 5.2.5

cpe:2.3:a:craftcms:craft_cms:5.2.5
Craftcms » Craft Cms » Version: 5.2.6

cpe:2.3:a:craftcms:craft_cms:5.2.6
Craftcms » Craft Cms » Version: 5.2.7

cpe:2.3:a:craftcms:craft_cms:5.2.7
Craftcms » Craft Cms » Version: 5.2.8

cpe:2.3:a:craftcms:craft_cms:5.2.8
Craftcms » Craft Cms » Version: 5.2.9

cpe:2.3:a:craftcms:craft_cms:5.2.9
Craftcms » Craft Cms » Version: 5.3.0

cpe:2.3:a:craftcms:craft_cms:5.3.0
Craftcms » Craft Cms » Version: 5.3.0.1

cpe:2.3:a:craftcms:craft_cms:5.3.0.1
Craftcms » Craft Cms » Version: 5.3.0.2

cpe:2.3:a:craftcms:craft_cms:5.3.0.2
Craftcms » Craft Cms » Version: 5.3.0.3

cpe:2.3:a:craftcms:craft_cms:5.3.0.3
Craftcms » Craft Cms » Version: 5.3.1

cpe:2.3:a:craftcms:craft_cms:5.3.1
Craftcms » Craft Cms » Version: 5.3.2

cpe:2.3:a:craftcms:craft_cms:5.3.2
Craftcms » Craft Cms » Version: 5.3.3

cpe:2.3:a:craftcms:craft_cms:5.3.3
Craftcms » Craft Cms » Version: 5.3.4

cpe:2.3:a:craftcms:craft_cms:5.3.4
Craftcms » Craft Cms » Version: 5.3.5

cpe:2.3:a:craftcms:craft_cms:5.3.5
Craftcms » Craft Cms » Version: 5.3.6

cpe:2.3:a:craftcms:craft_cms:5.3.6
Craftcms » Craft Cms » Version: 5.4.0

cpe:2.3:a:craftcms:craft_cms:5.4.0
Craftcms » Craft Cms » Version: 5.4.0.1

cpe:2.3:a:craftcms:craft_cms:5.4.0.1
Craftcms » Craft Cms » Version: 5.4.1

cpe:2.3:a:craftcms:craft_cms:5.4.1
Craftcms » Craft Cms » Version: 5.4.2

cpe:2.3:a:craftcms:craft_cms:5.4.2
Craftcms » Craft Cms » Version: 5.4.3

cpe:2.3:a:craftcms:craft_cms:5.4.3
Craftcms » Craft Cms » Version: 5.4.4

cpe:2.3:a:craftcms:craft_cms:5.4.4
Craftcms » Craft Cms » Version: 5.4.5

cpe:2.3:a:craftcms:craft_cms:5.4.5
Craftcms » Craft Cms » Version: 5.4.5.1

cpe:2.3:a:craftcms:craft_cms:5.4.5.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-52291

Products

Pricing

Contact Us