Lucene search
MitreCVE-2022-40734HistorySep 14, 2022 - 11:15 p.m.
CVE-2022-40734
2022-09-1423:15:09
CWE-22
mitre
web.nvd.nist.gov
78
In Wild
7
cve-2022-40734
unisharp laravel-filemanager
laravel filemanager
directory traversal
nvd
security vulnerability
exploit
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0.124
Percentile
95.5%
UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F… directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0.
Affected configurations
Node
unisharplaravel_filemanagerRange≤2.5.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| unisharp | laravel_filemanager | * | cpe:2.3:a:unisharp:laravel_filemanager:*:*:*:*:*:*:*:* |
References
Social References
More
Related
veracode
veracode
Directory Traversal
2022-09-15 07:24:31
github
github
UniSharp Laravel Filemanager directory traversal vulnerability
2022-09-15 00:00:14
attackerkb
attackerkb
CVE-2022-40734
2022-09-14 00:00:00
nuclei
nuclei
Laravel Filemanager v2.5.1 - Local File Inclusion
2022-09-15 08:44:40
prion
prion
Directory traversal
2022-09-14 23:15:00
osv
osv
CVE-2022-40734
2022-09-14 23:15:09
UniSharp Laravel Filemanager directory traversal vulnerability
2022-09-15 00:00:14
cvelist
cvelist
CVE-2022-40734
2022-09-14 00:00:00
nvd
nvd
CVE-2022-40734
2022-09-14 23:15:09
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
6.2
Confidence
High
EPSS
0.124
Percentile
95.5%
Related for CVE-2022-40734