Skip to content
OpenAdvisories

Product · crivion

Laranode

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2026-100520 Public exploit

    Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint

    Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in th…

    crivion Laranode