unisharp vulnerabilities

Recent CVEs affecting unisharp products. 2 tracked.

unisharp has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-09-14. Highest priority: CVE-2022-40734 (score 51/100).

• CVE-2022-40734 MEDIUM 6.5 UPGRADE UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F.
• CVE-2021-23814 MEDIUM 6.7 DOWNGRADE This affects versions of the package unisharp/laravel-filemanager before 2.6.2

FAQ

How do I fix unisharp vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is unisharp being exploited right now?

None of the tracked unisharp CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which unisharp CVE should I patch first?

CVE-2022-40734 currently ranks highest (51/100): UniSharp laravel-filemanager (aka Laravel Filemanager) before 2.6.4 allows download?working_dir=%2F..

Products

• laravel filemanager
• laravel-filemanager

← Back to latest CVEs