Cybersecurity Alerts

Actively Exploited Vulnerabilities

← Back to Cybersecurity Alerts

CVE-2021-3129

Laravel | IgnitionAdded 2023-09-18Remediation Deadline 2023-10-09Active Ransomware Campaign

Laravel Ignition File Upload Vulnerability

Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().

Required Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

References