CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Debian. Public exploit code or proof-of-concept references have been detected in its references. Its EPSS score suggests a 19.8% probability of exploitation in the next 30 days.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, which are handled as application/x-httpd-php on systems based on Debian. NOTE: this CVE Record is for Laravel Framework, and is unrelated to any reports concerning incorrectly written user applications for image upload.
Related CVEs
Other vulnerabilities affecting the same vendor(s)