Description

Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL. Patched with Version v2.3.3.

INFO

Published Date :

2024-08-12T15:39:41.174Z

Last Modified :

2024-09-18T15:34:58.289Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-42485 vulnerability.

Vendors Products
Filament
  • Excel Export
Pxlrbt
  • Filament Excel
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-42485.

URL Resource
https://github.com/pxlrbt/filament-excel/commit/bda42891a4b0c15d5dab5da8c53a006ddadccfb7 cve-icon cve-icon
https://github.com/pxlrbt/filament-excel/security/advisories/GHSA-m3px-vjxr-fx4m cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact