CVE-2024-40400
CVE-2024-40400
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.
CVSS 8.8 · High · EPSS 0.8% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
automad/automad Packagist
- Versions
- 1.10.9
- 2.0.0-alpha.1
- 2.0.0-alpha.2
- 2.0.0-alpha.3
- 2.0.0-alpha.4
- Affected ranges
- ECOSYSTEM: < 2.0.0-alpha.5
Update to 2.0.0-alpha.5