CVE-2025-65345

Publication date

2025-12-03 00:00:00

Family

mitre

State

PUBLISHED

Description

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives containing files and directories outside the intended scope due to improper path validation.