CVE Intelligence

Facade vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Facade products: 1 record(s), with severity, exploitation and fixes.

Ignition 1

Exploited only (KEV) →

CVE-2021-3129 Critical · 9.8 KEV Urgent · 93 Public exploit Ransomware Jan 12, 2021
Laravel Ignition File Upload Vulnerability
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.