Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Priority HIGH 73

UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00427 Published 2026-04-05 No fix listed CWE-434
Priority MEDIUM 42

This affects versions of the package unisharp/laravel-filemanager before 2.6.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0183 Published 2021-12-17 Fixed in 2.6.2 CWE-94