An arbitrary file upload vulnerability in UniSharp Laravel File Manager allows authenticated attackers to achieve remote code execution on the underlying server.

The application fails to properly validate file types during upload, allowing an authenticated attacker to upload malicious PHP files via the upload endpoint. By setting the type parameter to Files and targeting the working directory path, an attacker can trigger execution of the uploaded script.

This vulnerability poses a critical risk to the confidentiality, integrity, and availability of the host system. Successful exploitation allows for full remote code execution, which could lead to complete system compromise, unauthorized access to sensitive application data, and the potential for lateral movement within the network. With a CVSS score of 8.8, this flaw represents a high-severity threat that requires immediate attention.

Immediate Action: Since no specific patch version is provided, administrators should immediately audit their use of the Laravel File Manager component and restrict access to the file upload functionality to trusted users only. If the functionality is not business-critical, disable the file manager until a secure version or official patch is confirmed by the vendor.

Proactive Monitoring: Review web server and application access logs for suspicious POST requests targeting the /laravel-filemanager/upload endpoint. Monitor for the creation of unexpected files in the working directory, particularly those with .php extensions.

Compensating Controls: Deploy a Web Application Firewall (WAF) to filter and block multipart form data containing unauthorized file extensions or suspicious filename patterns. Ensure that the web server configuration prevents the execution of scripts within the directory where user-uploaded files are stored.

Public Exploit Available: Yes, a public exploit exists as documented in Exploit-DB entry 46389.

Given the availability of public exploit code and the critical nature of remote code execution, this vulnerability must be treated with high priority. Organizations should verify their current version of UniSharp Laravel File Manager and implement strict access controls or disable the component entirely if it cannot be verified as secure. Immediate remediation is necessary to prevent potential system-wide compromise.