CVE Intelligence

Composer Facade/ignition vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Composer Facade/ignition: 1 record(s), with affected versions and fixes.

CVE-2021-3129 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware Jan 12, 2021
Laravel Ignition File Upload Vulnerability
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.