Description
Filament Excel enables excel export for Filament admin resources. The export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL. Patched with Version v2.3.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| pxlrbt | filament-excel | >= 2.0.0-alpha, < 2.3.3, < 1.1.14 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | pxlrbt/filament-excel | >= 2.0.0-alpha, < 2.3.3 | 2.3.3 | GHSA-m3px-vjxr-fx4m |
| Packagist | pxlrbt/filament-excel | < 1.1.14 | 1.1.14 | GHSA-m3px-vjxr-fx4m |