Lucene search
GoogleOSV:CVE-2021-3129HistoryJan 12, 2021 - 3:15 p.m.
CVE-2021-3129
2021-01-1215:15:16
Google
osv.dev
11
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.
Related
checkpoint_advisories
checkpoint_advisories
Laravel Ignition Remote Code Execution (CVE-2021-3129)
2021-02-01 00:00:00
friendsofphp
friendsofphp
Remote code execution
2020-11-17 09:18:00
Remote code execution
2020-11-17 09:18:00
githubexploit
githubexploit
Exploit for Vulnerability in Facade Ignition
2021-01-25 08:42:28
Exploit for Vulnerability in Facade Ignition
2021-01-27 10:16:35
Exploit for Vulnerability in Facade Ignition
2021-01-27 05:44:52
nessus
nessus
Facade Ignition < 1.16.14 / 2.x < 2.4.2 / 2.5.x < 2.5.2 RCE
2024-04-29 00:00:00
nvd
nvd
CVE-2021-3129
2021-01-12 15:15:16
attackerkb
attackerkb
CVE-2021-3129
2021-01-12 00:00:00
osv
osv
Unauthenticated remote code execution in Ignition
2021-03-29 20:23:46
thn
thn
10-Year-Old 'RUBYCARP' Romanian Hacker Group Surfaces with Botnet
2024-04-09 14:01:00
Researchers Uncover 'LLMjacking' Scheme Targeting Cloud-Hosted AI Models
2024-05-10 07:41:00
packetstorm
packetstorm
Ignition 2.5.1 Remote Code Execution
2021-04-06 00:00:00
Ignition Remote Code Execution
2022-02-16 00:00:00
cvelist
cvelist
CVE-2021-3129
2021-01-12 14:07:38
zdt
zdt
Ignition 2.5.1 Remote Code Execution Exploit
2021-04-07 00:00:00
Ignition Remote Code Execution Exploit
2022-02-17 00:00:00
github
github
Unauthenticated remote code execution in Ignition
2021-03-29 20:23:46
veracode
veracode
Arbitrary Code Execution
2021-01-13 02:33:13
cisa_kev
cisa_kev
Laravel Ignition File Upload Vulnerability
2023-09-18 00:00:00
cve
cve
CVE-2021-3129
2021-01-12 15:15:16
prion
prion
Code injection
2021-01-12 15:15:00
nuclei
nuclei
Laravel with Ignition <= v8.4.2 Debug Mode - Remote Code Execution
2021-02-27 12:56:57
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-02-18 21:24:12