GHSA-rr44-8j7r-jg2q
alexusmai laravel-file-manager is vulnerable to Directory Traversal
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | alexusmai/laravel-file-manager | <= 3.3.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.
References
External links from the advisory. They lead to third-party sites.