CVE-2025-65346 PoC — Laravel File Manager 安全漏洞

Source

https://github.com/Theethat-Thamwasin/CVE-2025-65346

Associated Vulnerability

Title:Laravel File Manager 安全漏洞 (CVE-2025-65346)
Description:Laravel File Manager是Aleksandr Manekin个人开发者的一个Laravel文件管理器。 Laravel File Manager 3.3.1及之前版本存在安全漏洞，该漏洞源于解压缩功能未充分验证提取路径，可能导致目录遍历攻击。

Description

A Path Traversal vulnerability in the unzip/extract functionality of the affected application allows an attacker to write files to arbitrary filesystem locations during archive extraction. Because the extraction routine fails to sanitize destination paths inside ZIP entries, an attacker can craft ZIP archives containing traversal sequences (e.g., .

File Snapshot


 None

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!