CVE-2022-0472: Unrestricted Upload of File with Dangerous Type

February 6, 2022 (updated February 11, 2022)

Unrestricted Upload of File with Dangerous Type in Packagist jsdecena/laracom prior to v2.0.9.

References

github.com/advisories/GHSA-5q5w-mqp6-g2gh
github.com/jsdecena/laracom/commit/256026193ce994dc4c1365e02f414d8a0cd77ae8
huntr.dev/bounties/cb5b8563-15cf-408c-9f79-4871ea0a8713
nvd.nist.gov/vuln/detail/CVE-2022-0472

Code Behaviors & Features

Detect and mitigate CVE-2022-0472 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →