Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/06/21 3:31 p.m.•18 views

Duplicate Advisory: Craft CMS has authenticated path traversal in `assets/icon`, allowing local `.svg` file read

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-c43v-4cr8-6mvp. This link is maintained to preserve external references. Original Description Craft CMS from 4.0.0-RC1 contains an authenticated path traversal vulnerability in the assets/icon endpoint where the...

7.1CVSS5.8AI score0.00493EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder