Vendors / UniSharp Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 2 CVSS 7.0–8.9
Exploited now UniSharp records in CISA KEV No UniSharp vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 73
UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint.
CVSS 4.0 HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.00427 · Published 2026-04-05 · No fix listed CWE-434
Priority MEDIUM 42
This affects versions of the package unisharp/laravel-filemanager before 2.6.2.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0183 · Published 2021-12-17 · Fixed in 2.6.2 CWE-94
Priority LOW 37
UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F..
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.05183 · Published 2022-09-14 · Fixed in 2.6.4 CWE-22
Open these records in search → All records by CVSS severity
Critical0 High2 Medium1 Low0 No CVSS0