UniSharp Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with UniSharp products.
Products
- Laravel File Manager1 vulnerability
- laravel_filemanager1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-25673HIGH | UniSharp Laravel File Manager v2.0.0-alpha7 Arbitrary File UploadUniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute arbitrary code by accessing the uploaded file through the working directory path. CWE-434Apr 5, 2026 | CVSS8.7v4.0 | EPSS0.411% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-40734MEDIUM | UniSharp Laravel Filemanager directory traversal vulnerabilityUniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.. directory traversal to read arbitrary files, as exploited in the wild in June 2022. This is related to league/flysystem before 2.0.0. | CVSS6.5v3.1 | EPSS4.3% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |