En resumen
- CVE-2025-65345 es una vulnerabilidad MEDIO (CVSS 6.5) que afecta a alexusmai/laravel-file-manager, laravel file manager (alexusmai).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.55%, mayor que el 46.2% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
NVD description
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
Más vulnerabilidades de alexusmai/laravel-file-manager
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free