Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-46001
9.8
CRITICALCVSS v3
Published
July 18, 2025
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An arbitrary file upload vulnerability in the is_allowed_file_type() function of Filemanager v2.3.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
simogeo/Filemanager
GitHubAn open-source file manager released under MIT license. Up-to-date for PHP connector. This package is DEPRECATED. Now, please use RichFileManager available at : https://github.com/servocoder/RichFilemanager.
GitHubAn open-source file manager released under MIT license. Up-to-date for PHP connector. This package is DEPRECATED. Now, please use RichFileManager available at : https://github.com/servocoder/RichFilemanager.>= 0.8, <= 1.1, >= 1.5.0, <= 2.0.0, all versionsNVD