Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
ImpactThe export download route `/filament-excel/{path}` allowed downloading any file without login when the webserver allows `../` in the URL.PatchesPatched with Version v2.3.3CreditsThanks to Kevin Pohl for reporting this.