Описание
UniSharp Laravel Filemanager Code Injection vulnerability
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code.
Пакеты
unisharp/laravel-filemanager
< 2.9.1
2.9.1
Связанные уязвимости
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code.
Уязвимость программного пакета UniSharp laravel-filemanager, связанная с неверным управлением генерацией кода, позволяющая нарушителю выполнить произвольный код