CVE-2023-24249

Description

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.

Affected Platforms

Weakness Type

CWE-434

References

• https://flyd.uk/post/cve-2023-24249/
• https://github.com/z-song/laravel-admin
• https://laravel-admin.org/
• https://flyd.uk/post/cve-2023-24249/
• https://github.com/z-song/laravel-admin
• https://laravel-admin.org/