VULNERABILITY INTELLIGENCE

CVE-2024-7495

CVSS score6.3 MEDIUM

EPSS probability0.60%

CISA KEVNot currently listed

Published2024-08-06

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects an unknown part of the file app/Http/Controllers/HomeController.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-273621 was assigned to this vulnerability.

Weakness classification

cna@vuldb.com: CWE-434

Primary references

cna@vuldb.com — Exploit, Third Party Advisory
cna@vuldb.com — Permissions Required, Third Party Advisory
cna@vuldb.com — Third Party Advisory
cna@vuldb.com — Issue Tracking, Third Party Advisory