An arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
References:GSA_kwCzR0hTQS1tNWh3LXJodnItZjQ3Y84ABKRt
simogeo/filemanager arbitrary file upload vulnerability
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| packagist:simogeo/filemanager | < 2.5.0 | No known fixed version | |
Affected Version RangesAll affected versions1.6.0, 1.7.0, 1.8.0, 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.4.0 |
|||