Skip to content
Threat Feed
Subscribe

Product

LaraDashboard (>= 0.9.2, <= 1.2.2)

1 brief RSS
high advisory

Arbitrary File Upload and RCE in Lara Dashboard

Lara Dashboard versions prior to 1.3.2 are vulnerable to arbitrary file upload via the core-upgrades endpoint, allowing unauthorized administrators to achieve remote code execution.

PoC Lara Dashboard +3 web-application-vulnerability rce file-upload path-traversal web-vulnerability
2t 3c updated