Packagist/webklex/laravel-imap CVE-2023-35169: critical 9, EPSS 3.19%

php-imap vulnerable to RCE through a directory traversal vulnerability

Action: Upgrade webklex/laravel-imap to 5.3.0 or later.

composer require webklex/laravel-imap:5.3.0

Affected

Fixed versions

Sources

• osv: GHSA-47p7-xfcc-4pv9#Packagist/webklex/laravel-imap
• https://github.com/Webklex/php-imap/security/advisories/GHSA-47p7-xfcc-4pv9
• https://nvd.nist.gov/vuln/detail/CVE-2023-35169
• https://github.com/Webklex/php-imap/pull/414
• https://github.com/Webklex/php-imap
• https://github.com/Webklex/php-imap/blob/5.2.0/src/Attachment.php#L251-L255
• https://github.com/Webklex/php-imap/blob/5.2.0/src/Attachment.php#L252
• https://github.com/Webklex/php-imap/releases/tag/5.3.0

CVE-2023-35169 · published 2023-06-21T21:58:58Z · modified 2026-09-10T03:50:01.941524653Z · JSON