CVE-2024-52306 | THREATINT

Description

FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerability is fixed in 3.0.9.

Reserved 2024-11-06 | Published 2024-11-13 | Updated 2024-11-13 | Assigner GitHub_M

HIGH: 7.7CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H

Product status

< 3.0.9

affected

References

github.com/Laravel-Backpack/FileManager/security/advisories/GHSA-8237-957h-h2c2

github.com/...ckpack/FileManager/commit/2830498b85e05fb3c92179053b4d7c4a0fdb880b

cve.org (CVE-2024-52306)

nvd.nist.gov (CVE-2024-52306)

Download JSON

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.