En resumen
- CVE-2025-65346 es una vulnerabilidad CRÍTICO (CVSS 9.1) que afecta a alexusmai/laravel-file-manager, laravel file manager (alexusmai).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.95%, mayor que el 61.4% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
Description
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.
NVD description
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.
Más vulnerabilidades de alexusmai/laravel-file-manager
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free