Skip to content
Threat Feed
Subscribe

Product

LaraDashboard (< 1.4.5)

1 brief RSS
high advisory

Arbitrary File Upload and RCE in Lara Dashboard

Lara Dashboard versions prior to 1.3.2 are vulnerable to arbitrary file upload via the core-upgrades endpoint, allowing unauthorized administrators to achieve remote code execution.

PoC Lara Dashboard +4 web-application-vulnerability rce file-upload path-traversal web-vulnerability
3t 4c updated