Skip to content
Threat Feed
Subscribe

Product

LaraDashboard (0.9.2 - 1.2.2)

1 brief RSS
high advisory

Arbitrary File Upload and RCE in Lara Dashboard

Lara Dashboard versions prior to 1.3.2 are vulnerable to arbitrary file upload via the core-upgrades endpoint, allowing unauthorized administrators to achieve remote code execution.

Lara Dashboard +2 web-application-vulnerability rce file-upload path-traversal web-vulnerability
3r 2t 1c updated