| Package | Affected versions | Patched versions |
|---|---|---|
| civicrm | ≥ 5.22.0, < 5.24.3< 5.21.3 | 5.24.35.21.3 |
In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free