CVE-2022-40734

UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.

published September 14, 2022

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05183 · 92.4th percentile
Published
2022-09-14T00:00Z
EPSS history
Timeline
  • 14 SEP 00:00Z
    UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.
    cvelistv5