CVE-2024-52306: FileManager Deserialization of Untrusted Data vulnerability

Severity: Critical

CVSS Score: 7.7

FileManager provides a Backpack admin interface for files and folder. Prior to 3.0.9, deserialization of untrusted data from the mimes parameter could lead to remote code execution. This vulnerability is fixed in 3.0.9.