Описание
alexusmai laravel-file-manager is vulnerable to Directory Traversal
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
Пакеты
Наименование
alexusmai/laravel-file-manager
composer
Затронутые версииВерсия исправления
<= 3.3.1
Отсутствует
Связанные уязвимости
CVSS3: 6.5
nvd
2 месяца назад
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.