CVE-2024-47823

CVE-2024-47823 affects livewire/livewire (Laravel). In versions before 2.12.7 and 3.5.2, the uploaded file extension is inferred from MIME type, not from the original filename, enabling an attacker to bypass validation and potentially achieve RCE when a PHP file with a valid MIME type is uploaded...

CVE-2024-22859

CVE-2024-22859 describes a CSRF vulnerability in Livewire prior to 3.0.4 that can allow remote attackers to cause arbitrary code execution via the getCsrfToken function. The issue is supported by multiple sources, including Red Hat, Veracode, OSV, CNNVD, CVE lists, and advisory aggregations, all ...