laravel-admin has Arbitrary File Upload vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-24249 · ADVISORY
• z-song/laravel-admin · WEB
• flyd.uk/post/cve-2023-24249 · WEB
• z-song/laravel-admin · PACKAGE
• laravel-admin.org · WEB
• flyd.uk/post/cve-2023-24249 · Exploit
• laravel-admin.org · Product

encore/laravel-admin 的其他漏洞

• CVE-2019-17433中危 4.8z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.