Vulnerabilities > Laravel Admin

DATE CVE VULNERABILITY TITLE RISK
2023-02-27 CVE-2023-24249 Unrestricted Upload of File with Dangerous Type vulnerability in Laravel-Admin 1.8.19
An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.
network
low complexity
laravel-admin CWE-434
7.2
2019-10-10 CVE-2019-17433 Cross-site Scripting vulnerability in Laravel-Admin 1.7.3
z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.
network
low complexity
laravel-admin CWE-79
4.8