Skip to content
OpenAdvisories

Vendor

plank

6 known vulnerabilities.

Products

laravel-mediable 6
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.8
    CVE-2026-49972

    Laravel-Mediable < 7.0.0 File Upload RCE via Extension Bypass

    Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading a file with an embedded PHP extension disguised within a double extension such as shell.php.jpg. The PATHINF…

    plank laravel-mediable
  • High 8.8
    CVE-2026-49970

    Laravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath()

    Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath() function that allows attackers to write uploaded files to arbitrary locations by controlling the directory argument passed to MediaUploader::toDestination(). Att…

    plank laravel-mediable plank/laravel-mediable Packagist
  • High 7.4
    CVE-2026-49969

    Laravel-Mediable < 7.0.0 SSRF via RemoteUrlAdapter URL Handling

    Laravel-Mediable before 7.0.0 contains a server-side request forgery vulnerability that allows remote attackers to issue arbitrary HTTP requests from the server by supplying unvalidated caller-controlled URLs to endpoints backed by MediaUploader::fromSource()…

    plank laravel-mediable