PatchFirst · Latest vulnerabilities
Vulnerabilities published for alexusmai/laravel-file-manager in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
Check your installed stack and versions against the current vulnerability feeds.