Description (CNA)
FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerability is fixed in 3.0.9.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Laravel-Backpack / FileManager | affected < 3.0.9 |
CWE
CWE-502
References
- https://github.com/Laravel-Backpack/FileManager/security/advisories/GHSA-8237-957h-h2c2
- https://github.com/Laravel-Backpack/FileManager/commit/2830498b85e05fb3c92179053b4d7c4a0fdb880b
ADP enrichment
No English description supplied.
No references supplied.