Facade: community verdicts

1 notable / known-exploited Facade CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Facade CVE, see NVD ↗.

CVE-2021-3129CRIT 9.8KEVEPSS 100%
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.