CVE-2024-7943

5.3 mediumEPSS 0.7%

Medium (5.3) in adonesevangelista laravel property management system. EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability was found in itsourcecode Laravel Property Management System 1.0 and classified as critical. This issue affects the function upload of the file PropertiesController.php. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2024-08-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adonesevangelista:laravel_property_management_system

References

https://github.com/DeepMountains/zzz/blob/main/CVE2-1.md
https://vuldb.com/?ctiid.275135
https://vuldb.com/?id.275135
https://vuldb.com/?submit.393371

Check your stack JSON