CVE-2021-23814

Packagist/unisharp/laravel-filemanager CVE-2021-23814: medium 6.7, EPSS 1.83%

Unrestricted Upload of File with Dangerous Type in unisharp/laravel-filemanager

Action: Upgrade unisharp/laravel-filemanager to 2.6.2 or later.

composer require unisharp/laravel-filemanager:2.6.2

Affected

Fixed versions

Sources

• osv: GHSA-f8x6-m9f5-ffp8
• https://nvd.nist.gov/vuln/detail/CVE-2021-23814
• https://github.com/UniSharp/laravel-filemanager/issues/1113#issuecomment-1812092975
• https://github.com/UniSharp/laravel-filemanager/commit/bd84899ce65a7f193e676dd8444e424fa50f64fa
• https://github.com/UniSharp/laravel-filemanager
• https://github.com/UniSharp/laravel-filemanager/blob/master/src/Controllers/UploadController.php#L26
• https://github.com/UniSharp/laravel-filemanager/blob/master/src/Controllers/UploadController.php%23L26
• https://snyk.io/vuln/SNYK-PHP-UNISHARPLARAVELFILEMANAGER-1567199

CVE-2021-23814 · published 2022-01-06T21:08:34Z · modified 2025-06-18T04:13:17.934264Z · JSON