Read the docs

Czim

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Czim records in CISA KEV

No Czim vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
File-handling 1 record LOW

Records

1 record

TI-2024-31433 CVE-2024-47049 · GHSA-6rgh-r6j3-3223

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer)…

Priority LOW 37

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00636 Published 2024-09-17 Fixed in 1.5.0, 2.3.0 CWE-22
Open these records in search →