Lucene search

K
osvGoogleOSV:GHSA-9R2J-RG24-FVPJ
HistoryMay 24, 2022 - 5:12 p.m.

FrozenNode Laravel-Administrator unrestricted file upload

2022-05-2417:12:48
Google
osv.dev
5
frozennode
laravel-administrator
unrestricted file upload
remote code execution
php content
gif image
discontinued
software

AI Score

7.3

Confidence

High

EPSS

0.019

Percentile

88.6%

FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_image/image/file_upload image upload with PHP content within a GIF image that has the .php extension. NOTE: this product is discontinued.

AI Score

7.3

Confidence

High

EPSS

0.019

Percentile

88.6%