9.8
Critique
CVE-2024-21546 Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE)…
Description
Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| unisharp/laravel-filemanager 2.9 | premières → < 2.9.1 | 2.9.1 |