CVE-2024-47049: Improper Limitation of a Pathname to a Restricted Directory

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 used with PHP Composer does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files...

CVE-2024-47049

The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 used with PHP Composer does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files...

PT-2024-32373

Name of the Vulnerable Software and Affected Versions czim/file-handling versions prior to 1.5.0 czim/file-handling versions 2.x prior to 2.3.0 Description The issue arises from improper validation of URLs within the makeFromUrl and makeFromAny functions, leading to Server-Side Request Forgery SS...