Laravel Ignition
criticalCVSS 9.8
Ignition debug mode allows unauthenticated remote code execution via file upload and log poisoning.
Dampak
Full server compromise when APP_DEBUG is enabled in production.
Perbaikan
Upgrade Ignition to 2.5.2 and set APP_DEBUG=false in production.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2021-3129Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2021-3129.
Jalankan audit gratis