Security Advisory
CVE-2025-65346
9.1
CRITICAL
Vulnerability Description
alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to be written to arbitrary locations on the filesystem due to insufficient validation of extraction paths.
Published Date
December 4, 2025
Official Source
NIST NVD Advisory