Versions of the package unisharp/laravel-filemanager before 2.9.1 are vulnerable to Remote Code Execution (RCE) through using a valid mimetype and inserting the . character after the php file extension. This allows the attacker to execute malicious code.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| unisharp/laravel-filemanager(Packagist) | 0 | 2.9.1 | N/A |
CVSS Metrics
