CVE-2022-40734

Packagist/unisharp/laravel-filemanager CVE-2022-40734: medium 6.5, EPSS 5.18%

UniSharp Laravel Filemanager directory traversal vulnerability

Action: Upgrade unisharp/laravel-filemanager to 2.6.4 or later.

composer require unisharp/laravel-filemanager:2.6.4

Affected

Fixed versions

Sources

• osv: GHSA-5m2h-7rf2-rpx6
• https://nvd.nist.gov/vuln/detail/CVE-2022-40734
• https://github.com/UniSharp/laravel-filemanager/issues/1150
• https://github.com/UniSharp/laravel-filemanager/issues/1150#issuecomment-1320186966
• https://github.com/UniSharp/laravel-filemanager/issues/1150#issuecomment-1825310417
• https://github.com/UniSharp/laravel-filemanager/commit/8a357d02e8f54ddf130961c64ff2cfc1882bbfcf
• https://github.com/UniSharp/laravel-filemanager

CVE-2022-40734 · published 2022-09-15T00:00:14Z · modified 2024-02-16T08:21:09.781607Z · JSON