Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/craftcms/cms@4.12.2
purl pkg:composer/craftcms/cms@4.12.2
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-71sv-62m4-z3er Craft CMS vulnerable to Potential Remote Code Execution via missing path normalization & Twig SSTI Missing `normalizePath` in the function `FileHelper::absolutePath` could lead to Remote Code Execution on the server via twig SSTI. `(Post-authentication, ALLOW_ADMIN_CHANGES=true)` CVE-2024-52293
GHSA-f3cw-hg6r-chfv

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-04T16:49:49.953762+00:00 GithubOSV Importer Fixing VCID-71sv-62m4-z3er https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-f3cw-hg6r-chfv/GHSA-f3cw-hg6r-chfv.json 38.6.0
2026-06-04T16:22:36.811475+00:00 GitLab Importer Fixing VCID-71sv-62m4-z3er https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/craftcms/cms/CVE-2024-52293.yml 38.6.0