Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/05/15 6:01 p.m.•33 views

GHSA-748W-HM6R-QC7V Authenticated Sharp users can download unrelated Laravel Storage objects through the generic download endpoint

Sharp exposes a generic download endpoint that authorizes access only to the supplied Sharp entity instance, but then reads the target storage disk and path from request parameters. Because the requested storage object is not bound to the authorized entity instance, an authenticated Sharp user wh...

7.7CVSS6AI score0.0036EPSS
SaveExploits0References4
Rows per page
Query Builder