CVE-2024-7944

MEDIUM

Laravel Property Management System 1.0 - Unrestricted File Upload via DocumentsController UpdateDocumentsRequest

Title source: llm
STIX 2.1

Description

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References (4)

Core 4
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.275136
Permissions Required signature permissions-required
https://vuldb.com/?ctiid.275136
Issue Tracking third-party-advisory
https://vuldb.com/?submit.393372

Scores

CVSS v3 6.3
EPSS 0.0052
EPSS Percentile 39.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-434
Status published
Products (1)
adonesevangelista/laravel_property_management_system 1.0
Published Aug 20, 2024
Tracked Since Feb 18, 2026