Product
An insecure direct object reference vulnerability in the HasUploadFields trait of Backpack for Laravel allows authenticated users to delete arbitrary files on the configured storage disk via manipulated request parameters.