Known Exploited Vulnerabilities September 18, 2023 · CISA KEV Catalog

CVE-2021-3129: Laravel Ignition File Upload Vulnerability

Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2021-3129 Laravel
Related: CVE-2025-54068: Laravel Livewire Code Injection Vulnerability Known Exploited Vulnerabilities · Mar 20, 2026
CVE-2018-15133: Laravel Deserialization of Untrusted Data Vulnerability Known Exploited Vulnerabilities · Jan 16, 2024
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026