z-song/laravel-admin

z-song/laravel-admin

GitHubGitHub
GitHubgithub.com
laravel-admin.orglaravel-admin.org
Releases81
Frequency3 weeks 4 days
Last Release
Stars11.2K
Build a full-featured administrative interface in ten minutes
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2023-24249NVD↗
= 1.8.197.2 HIGH—

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.

CVE-2019-17433NVD↗
= 1.7.34.8 MEDIUM3.5 LOW

z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.