Vulnerability · Published Aug 20, 2024 · Assigned by VulDB
CVE-2024-7944itsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload
Medium 6.3
In plain English
A medium-severity unrestricted file upload in Laravel Property Management System from itsourcecode. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).
Official description
A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| itsourcecode | Laravel Property Management System | 1.0 |
Weakness: CWE-434 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
References
- VDB-275136 | itsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload vdb-entry, technical-description
- VDB-275136 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- Submit #393372 | itsourcecode Laravel Property Management System v1.0 FileUpload third-party-advisory
- https://github.com/DeepMountains/zzz/blob/main/CVE2-2.md exploit