Skip to content
Threat Feed
Subscribe

Product

Laravel Excel (>= 3.1.8, < 3.1.70)

1 brief RSS
high advisory

Laravel Excel Arbitrary File Overwrite via Path Traversal

The Laravel Excel library (v3.1.8-v3.1.69) fails to properly sanitize the destination path in the store() method, allowing an attacker to overwrite arbitrary files writable by the PHP process via path traversal, leading to potential RCE.

Laravel Excel path-traversal rce php
1t 1c