CVE-2021-3129 Laravel Ignition
Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().
- CVSS
- not scored
On CISA’s exploited list
Laravel Ignition File Upload Vulnerability
- Added
- 2023-09-18
- Federal patch deadline
- 2023-10-09
- Ransomware use
- known