← Database

CVE-2024-42485

HIGH CVSS: 7.5 Published: 2024-08-12 Modified: 2026-06-17

Description

Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL. Patched with Version v2.3.3.

Affected Platforms

Pxlrbt Filament Excel

Weakness Type

CWE-22, CWE-22

References