CVE-2025-46001
CVE-2025-46001
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
CVSS 9.8 · Critical · EPSS 0.8%
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
simogeo/filemanager Packagist
- Versions
- v1.5
- v1.6.0
- v1.7.0
- v1.8.0
- v2.0.0
- v2.1.0
- v2.2.0
- v2.3.0
- v2.4.0
- v2.5.0
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published