Approved changes feed: RSS · Atom

cpe:2.3:a:unisharp:laravel_filemanager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnisharp (5f7538b3-98e1-547f-afdc-ec6001277664)
ProductLaravel Filemanager (bc81f248-4694-56f2-a98e-f0737853813a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/unisharp/laravel-filemanager purl2cpe 2026-06-01 10:12:47.581274
pkg:github/unisharp/laravel-filemanager purl2cpe 2026-06-01 10:12:47.581276

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40734 vulnerable 2026-06-08 05:48:28.038449 Details available
UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0.
Published: 2022-09-14T00:00:00.000Z
Updated: 2024-08-03T12:21:46.472Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.