Vulnerability · Published Dec 17, 2021 · Assigned by snyk

CVE-2021-23814

Medium 6.7

In plain English

A medium-severity code injection in unisharp/laravel-filemanager. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.8% (higher than 79% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.7Medium

Exploit odds (30 days)1.8%top 21.0% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

This affects versions of the package unisharp/laravel-filemanager before 2.6.2. The upload() function does not sufficiently validate the file type when uploading. An attacker may be able to reproduce the following steps: 1. Install a package with a web Laravel application. 2. Navigate to the Upload window 3. Upload an image file, then capture the request 4. Edit the request contents with a malicious file (webshell) 5. Enter the path of file uploaded on URL - Remote Code Execution **Note:** Prevention for bad extensions can be done by using a whitelist in the config file(lfm.php). Corresponding document can be found in [here](https://unisharp.github.io/laravel-filemanager/configfolder-categories).

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Packagist	unisharp/laravel-filemanager	2.6.2	GHSA-f8x6-m9f5-ffp8

Affected products (as reported)

Vendor	Product	Versions
n/a	unisharp/laravel-filemanager	0 – before 2.6.2

Weakness: CWE-94 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L/E:P

In plain English

Official description

Affected packages & fixed versions

Affected products (as reported)

References