CVE-2026-49972— plank laravel-mediable 任意文件上传漏洞

Laravel-Mediable < 7.0.0 File Upload RCE via Extension Bypass

Laravel-Mediable before 7.0.0 contains a file upload vulnerability that allows unauthenticated attackers to achieve remote code execution by uploading a file with an embedded PHP extension disguised within a double extension such as shell.php.jpg. The PATHINFO_FILENAME extraction preserves the inner .php extension in the base name, and on misconfigured Apache or nginx servers that execute any filename containing .php as PHP, the stored file is interpreted as executable code while all MIME type, extension, and aggregate type validation checks pass due to the outer .jpg extension.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

危险类型文件的不加限制上传

plank laravel-mediable 任意文件上传漏洞

Plank Laravel-Mediable是Plank个人开发者开源的一个Laravel媒体文件管理包。 Plank laravel-mediable 7.0.0之前版本存在任意文件上传漏洞，该漏洞源于文件上传漏洞，允许未经身份验证的攻击者通过上传带有双扩展名（如shell.php.jpg）的嵌入PHP扩展名的文件实现远程代码执行。

N/A

N/A