VDB
Sign up
HIGH7.2

GHSA-g857-47pm-3r32

laravel-admin has Arbitrary File Upload vulnerability

Details

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/encore/laravel-admin
Introduced in: 0

No fixed version published yet for encore/laravel-admin (composer). Pin to a known-safe version or switch to an alternative.

References