| Package | Affected versions | Patched versions |
|---|---|---|
| livewire-filemanager/filemanager | ≤ 1.0.4 | |
| filemanager | < 1.0.0 | 1.0.0 |
Livewire Filemanager, commonly used in Laravel applications, contains LivewireFilemanagerComponent.php, which does not perform file type and MIME validation, allowing for RCE through upload of a malicious php file that can then be executed via the /storage/ URL if a commonly performed setup process within Laravel applications has been completed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free