Beveiligingsadvies

CVE-2025-65346

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-04 00:00:00
Laatst bijgewerkt 2025-12-05 19:55:59
Toegewezen door mitre
CVSS-score 9.1
Status PUBLISHED

Beschrijving

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.