CyberSecBulletin

Facade vulnerabilities

We track 1 vulnerability in Facade products. 1 is rated high or critical, and 1 has been exploited in real attacks. The most recent was published on January 12, 2021.

1vulnerabilities
1critical
0high
1exploited
9.8average CVSS score

Latest Facade vulnerabilities

  • 9.8 Critical severity

    Laravel Ignition File Upload Exploited

    CVE-2021-3129FacadeEPSS 99.9%

    Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel