[HIGH] Craft CMS vulnerable to Remote Code Execution via unrestricted file extension

PKSA-trjg-y1pb-yh98 CVE-2023-32679 GHSA-vqxf-r9ph-cc9c

Affected package: craftcms/cms

Affected version: >=4.0.0,<4.4.6

Reported by:
GitHub