CVE-2024-42485
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Summary
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Original description
The description as published by the source.
Filament Excel enables excel export for Filament admin resources. The export download route /filament-excel/{path} allowed downloading any file without login when the webserver allows ../ in the URL. Patched with Version v2.3.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com