An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint.
{
"cna_assigner": "mitre",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/46xxx/CVE-2025-46002.json"
}{
"extracted_events": [
{
"cpe": "cpe:2.3:a:simogeo:filemanager:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "2.0.0"
}
],
"source": "CPE_RANGE"
},
{
"original_tag": "v1.7.0",
"range": [
{
"fixed": "91eebbfecaa5de1b83e26f005beaf339d2dcedbf"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v1.8.0",
"range": [
{
"fixed": "e3b6bfea9ee18c7c058a2df43e5e2afcb86d0172"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v2.0.0",
"range": [
{
"fixed": "2d49d37dd5edb5c373d44ee4bd09fcfae15c52bc"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v2.1.0",
"range": [
{
"fixed": "496662d4a1ebd85cc676300d9173f32b10264bef"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v2.2.0",
"range": [
{
"fixed": "6766fe6f103bfce2c942c050fbc499543ba998cd"
}
],
"source": "REFERENCES_TAG"
},
{
"original_tag": "v2.3.0",
"range": [
{
"fixed": "f9fb75a9cc15d596ff6386746c2e75fc8d89c915"
}
],
"source": "REFERENCES_TAG"
}
]
}