Czim vulnerabilities
We track 1 vulnerability in Czim products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2024.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Czim vulnerabilities
- 8.2 High severity
File-handling: Improper Limitation of a Pathname to a Restricted Directory
The czim/file-handling package before 1.5.0 and 2.x before 2.3.0 (used with PHP Composer) does not properly validate URLs within makeFromUrl and makeFromAny, leading to SSRF, and to directory traversal for the reading of local files.