CVE-2024-42485
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
概要
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Filament Excel enables excel export for Filament admin resources. The export download route /filament-excel/{path} allowed downloading any file without login when the webserver allows ../ in the URL. Patched with Version v2.3.3.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com