Approved changes feed: RSS · Atom

cpe:2.3:a:pxlrbt:filament_excel:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPxlrbt (4290ff8b-6f15-5fea-aef2-169485e687ef)
ProductFilament Excel (f3fef819-36aa-5351-b08d-846bd42345a7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/pxlrbt/filament-excel purl2cpe 2026-06-01 10:10:56.418357
pkg:github/pxlrbt/filament-excel purl2cpe 2026-06-01 10:10:56.418358

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42485 vulnerable 2026-06-08 06:45:46.552083 Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
HIGH (7.5)
Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL. Patched with Version v2.3.3.
Published: 2024-08-12T15:39:41.174Z
Updated: 2024-09-18T15:34:58.289Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.