Skip to content
OpenAdvisories

Package · Packagist

czim/file-handling

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2024-47049

    czim/file-handling vulnerable to SSRF and directory traversal

    The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.

    czim/file-handling Packagist