CVE-2024-7944

MEDIUM

Adonesevangelista Laravel Property Ma... - Unrestricted File Upload

Title source: rule
STIX 2.1

Description

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

References (4)

Core 4
Core References
Third Party Advisory vdb-entry technical-description
https://vuldb.com/?id.275136
Permissions Required signature permissions-required
https://vuldb.com/?ctiid.275136
Issue Tracking third-party-advisory
https://vuldb.com/?submit.393372

Scores

CVSS v3 6.3
EPSS 0.0003
EPSS Percentile 8.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-434
Status published
Products (1)
adonesevangelista/laravel_property_management_system 1.0
Published Aug 20, 2024
Tracked Since Feb 18, 2026