A high-severity vulnerability (CVSS score: 7.5) in the Laravel Excel library allows an attacker to overwrite arbitrary existing files writable by the PHP process, potentially leading to remote code execution when the overwritten file is executed by the web server. The issue occurs because the `Excel::store` method resolves the destination path against the current working directory rather than the configured filesystem disk, allowing an application that passes a user-controlled value as the export path to write to an arbitrary existing file with content controlled by the attacker. Exploitation requires the application to pass an unsanitized, user-controlled value as the export path, and applications that pass a fixed or server-derived path are not affected. The vulnerability is present in versions of maatwebsite/excel greater than or equal to 3.1.8 and less than 3.1.70, which can be mitigated by validating the path before passing it to `store` or upgrading to a patched version.
We recommend you to update Laravel Excel to version 3.1.70.[/subscribe_to_unlock_form]
A high-severity vulnerability (CVSS score: 7.5) in the Laravel Excel library allows an attacker to overwrite arbitrary existing files writable by the PHP process, potentially leading to remote code execution when the overwritten file is executed by the web server. The issue occurs because the `Excel::store` method resolves the destination path against the current working directory rather than the configured filesystem disk, allowing an application that passes a user-controlled value as the export path to write to an arbitrary existing file with content controlled by the attacker. Exploitation requires the application to pass an unsanitized, user-controlled value as the export path, and applications that pass a fixed or server-derived path are not affected. The vulnerability is present in versions of maatwebsite/excel greater than or equal to 3.1.8 and less than 3.1.70, which can be mitigated by validating the path before passing it to `store` or upgrading to a patched version.
We recommend you to update Laravel Excel to version 3.1.70.[emaillocker id="1283"]
The following reports contain further technical details:
[/emaillocker]