CVE-2021-3129 — Vulnerability intelligence

Laravel — Ignition

Published: 2021-01-12T14:07:38.000Z

CVSS

9.8

CISA KEV

Known exploitation

Original source text (not a translation)

Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().

Sources

• Laravel Ignition File Upload Vulnerability
• Original advisory
• Original advisory
• CVE-2021-3129