CVE-2024-7944 - itsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload

Back Back to CVE browser

MEDIUM

itsourcecode Laravel Property Management System DocumentsController.php UpdateDocumentsRequest unrestricted upload

Published Aug 20, 2024

5.3

MEDIUM

CVSS 4.0

EPSS 0.52%

Description

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor ITSourceCode Product Laravel Property Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ITSourceCode

Laravel Property Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-434

Unrestricted Upload of File

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48784
Advisory
https://github.com/DeepMountains/zzz/blob/main/CVE2-2.md
exploitTechnical Description
https://vuldb.com/?ctiid.275136
signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.275136
vdb-entrytechnical-descriptionThird Party Advisory
https://vuldb.com/?submit.393372
third-party-advisoryIssue Tracking

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48784		Advisory
https://github.com/DeepMountains/zzz/blob/main/CVE2-2.md		exploitTechnical Description
https://vuldb.com/?ctiid.275136		signaturepermissions-requiredPermissions Required
https://vuldb.com/?id.275136		vdb-entrytechnical-descriptionThird Party Advisory
https://vuldb.com/?submit.393372		third-party-advisoryIssue Tracking