VULNERABILITY INTELLIGENCE
CVE-2019-25673
CVSS score8.7 HIGH
EPSS probability0.41%
CISA KEVNot currently listed
Published2026-04-05
Last modified2026-07-24
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipart form data to the upload endpoint. Attackers can upload PHP files with the type parameter set to Files and execute arbitrary code by accessing the uploaded file through the working directory path.
Weakness classification
- CWE-434: Unrestricted Upload of File with Dangerous Type