PT-2023-22484 · Laravel-S · Laravel-S

CVE-2023-29931

Published

2023-06-22

Updated

2024-12-06

CVSS v3.1

9.8

Critical

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions laravel-s versions prior to 3.7.36

Description The issue is related to Local File Inclusion, which can be exploited via the /src/Illuminate/Laravel.php API endpoint.

Recommendations For versions prior to 3.7.36, update to version 3.7.36 or later to resolve the issue.

Exploit

Fix

Files Accessible to External Parties

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2023-29931

GHSA-Q2FP-JW87-86PX

Laravel-S