Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-42485

Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint

Description

Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL. Patched with Version v2.3.3.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

pxlrbt filament-excel

  • >= 2.0.0-alpha, < 2.3.3affected
  • < 1.1.14affected

References