https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 03:47:15 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2024-42485 <p>Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL. Patched with Version v2.3.3.</p> <p>Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL. Patched with Version v2.3.3.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2024-42485 https://vulnerability.circl.lu/vuln/ghsa-m3px-vjxr-fx4m <p><strong>Affected:</strong> Packagist: pxlrbt/filament-excel</p> <p>### Impact The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL.</p> <p>### Patches Patched with Version v2.3.3</p> <p>### Credits Thanks to Kevin Pohl for reporting this.</p> <p><strong>Affected:</strong> Packagist: pxlrbt/filament-excel</p> <p>### Impact The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL.</p> <p>### Patches Patched with Version v2.3.3</p> <p>### Credits Thanks to Kevin Pohl for reporting this.</p> https://vulnerability.circl.lu/vuln/ghsa-m3px-vjxr-fx4m