In short
- CVE-2025-65345 is a MEDIUM (CVSS 6.5) vulnerability affecting alexusmai/laravel-file-manager, laravel file manager (alexusmai).
- Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.2% of all vulnerabilities.
- No patched version is listed yet: follow the vendor's advisory in References.
Description
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
NVD description
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
More vulnerabilities in alexusmai/laravel-file-manager
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free