CVE-2024-7944

5.3 mediumEPSS 0.5%

A vulnerability was found in itsourcecode Laravel Property Management System 1.0. It has been classified as critical. Affected is the function UpdateDocumentsRequest of the file DocumentsController.php. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

5.3 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2024-08-20
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

adonesevangelista:laravel_property_management_system

References

https://github.com/DeepMountains/zzz/blob/main/CVE2-2.md
https://vuldb.com/?ctiid.275136
https://vuldb.com/?id.275136
https://vuldb.com/?submit.393372

Check your stack JSON