← All advisories

High severity7.2NVD Advisory· Published Feb 27, 2023· Updated Jun 17, 2026

CVE-2023-24249

CVE-2023-24249

Description

An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
encore/laravel-adminPackagist	<= 1.8.19	—

Affected products

3

laravel-admin/laravel-admindescription
ghsa-coords
pkg:composer/encore/laravel-admin
Range: <= 1.8.19
Laravel Admin/Laravel Admin
cpe:2.3:a:laravel-admin:laravel-admin:1.8.19:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

7

flyd.uk/post/cve-2023-24249/nvdExploitThird Party Advisory
github.com/advisories/GHSA-g857-47pm-3r32ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-24249ghsaADVISORY
flyd.uk/post/cve-2023-24249ghsaWEB
github.com/z-song/laravel-admin/issues/5726ghsaWEB
laravel-admin.orgghsaWEB
laravel-admin.orgnvdProduct

News mentions

0

No linked articles in our index yet.