2 matches found
GHSA-M3PX-VJXR-FX4M Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Impact The export download route /filament-excel/path allowed downloading any file without login when the webserver allows ../ in the URL. Patches Patched with Version v2.3.3 Credits Thanks to Kevin Pohl for reporting this...
8.7CVSS7.4AI score0.0057EPSS
SaveExploits0References6
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Impact The export download route /filament-excel/path allowed downloading any file without login when the webserver allows ../ in the URL. Patches Patched with Version v2.3.3 Credits Thanks to Kevin Pohl for reporting this...
7.5CVSS6.8AI score0.0057EPSS
SaveExploits0References6Affected Software1
20