Arbitrary File Upload

2021-12-2005:16:26

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

arbitrary file upload

remote code execution

uploadcontroller vulnerability

file validation

EPSS

0.002

Percentile

57.0%

JSON

unisharp/laravel-filemanager is vulnerable to arbitrary file upload attacks. The vulnerability exists through UploadController.php where the ‘upload()’ function does not properly validate the upload files, allowing an attacker to upload a malicious crafted file and remotely execute arbitrary code on system.