CVE-2021-3129

Name of the Vulnerable Software and Affected Versions Ignition versions prior to 2.5.2 Laravel versions prior to 8.4.2

Description Unauthenticated remote attackers can execute arbitrary code due to insecure usage of the file get contents() and file put contents() functions. This issue is related to improper code generation management and is exploitable on sites where debug mode is enabled and the Ignition module, which handles error page generation, is active.

Recommendations Update Ignition to version 2.5.2 or later. Update Laravel to version 8.4.2 or later. Disable debug mode on production environments to prevent exploitation.