CVE-2025-65346
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbit…
Published: 2025-12-04 · CVSS: 9.1 · CVSS 3.1
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7