CyberRota Analysis
AI-GeneratedLaravel-Mediable versions prior to 7.0.0 are vulnerable to a path traversal flaw in the File::sanitizePath() function, allowing attackers to manipulate the directory argument in MediaUploader::toDestination() and upload files to arbitrary locations. This vulnerability can lead to remote code execution by enabling unauthorized access to sensitive files, including application and environment configuration files. Organizations using affected versions should prioritize patching to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows attackers to write uploaded files to arbitrary locations by controlling the directory argument passed to MediaUploader::toDestination(). Attackers can exploit the permissive character-class regex that allows both dot and slash characters combined with an ineffective trailing trim() call to bypass sanitization and upload files to sensitive locations such as the document root, environment configuration files, or application configuration directories, enabling remote code execution.