high7.2
CVE-2024-37295
Remote code execution in web server context
Impact
### Impact User with administrative privileges and upload files that look like images but contain PHP code which can then be executed in the context of the web server.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | aimeos/aimeos-core | >= 2024.04.1, < 2024.04.5 | 2024.04.5 |