CVE-2024-42485
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Résumé
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Filament Excel enables excel export for Filament admin resources. The export download route /filament-excel/{path} allowed downloading any file without login when the webserver allows ../ in the URL. Patched with Version v2.3.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com