CVE-2021-3129criticalunder attackransomware

CVE-2021-3129

Published · Updated

Follow this CVE+ Monitor Ignition+ Monitor facade/ignition

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 100%
from disclosure to weapon1 day
Published on NVDJan 12
1st PoC+1d
metasploit+1d
CISA KEV+979d
Action required by CISAfederal deadline: 2023-10-09

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

A debugging tool called Ignition used in Laravel has a flaw that lets attackers run any code they want on a website without needing a password, if the site is in debug mode. This happens because the tool unsafely reads and writes files.

Technical detail

Ignition before 2.5.2 uses file_get_contents() and file_put_contents() without proper validation, allowing unauthenticated attackers to achieve remote code execution on Laravel applications running in debug mode (Laravel < 8.4.2). The vulnerability requires no authentication and has a network-based attack vector with no user interaction needed.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/a
public PoCs found — 77
exploitdbwww.exploit-db.com/exploits/49424unverifiedgithubgithub.com/ambionics/laravel-exploits★ 289githubgithub.com/zhzyker/CVE-2021-3129★ 166githubgithub.com/joshuavanderpoll/CVE-2021-3129★ 158githubgithub.com/SNCKER/CVE-2021-3129★ 134githubgithub.com/SecPros-Team/laravel-CVE-2021-3129-EXP★ 78githubgithub.com/nth347/CVE-2021-3129_exploit★ 69githubgithub.com/crisprss/Laravel_CVE-2021-3129_EXP★ 18githubgithub.com/ajisai-babu/CVE-2021-3129-exp★ 13githubgithub.com/knqyf263/CVE-2021-3129★ 12githubgithub.com/0x0d3ad/CVE-2021-3129★ 10githubgithub.com/cuongtop4598/CVE-2021-3129-Script★ 7githubgithub.com/MadExploits/Laravel-debug-Checker★ 7githubgithub.com/Axianke/CVE-2021-3129★ 6githubgithub.com/0nion1/CVE-2021-3129★ 6githubgithub.com/shadowabi/Laravel-CVE-2021-3129★ 5githubgithub.com/FunPhishing/Laravel-8.4.2-rce-CVE-2021-3129★ 2githubgithub.com/wmasday/CVE-2021-3129★ 2githubgithub.com/idea-oss/laravel-CVE-2021-3129-EXP★ 1githubgithub.com/keyuan15/CVE-2021-3129★ 1githubgithub.com/lukwagoasuman/CVE-2021-3129---Laravel-RCE★ 1githubgithub.com/theNareshofficial/CVE-2021-3129-Lab★ 1githubgithub.com/piperpwn/CVE-2021-3129-piperpwn★ 0githubgithub.com/Y0s9/CVE-2021-3129★ 0githubgithub.com/qaisarafridi/cve-2021-3129★ 0githubgithub.com/miko550/CVE-2021-3129★ 0githubgithub.com/GodOfServer/CVE-2021-3129★ 0githubgithub.com/Giangdurian/CVE-2021-3129★ 0githubgithub.com/cc3305/CVE-2021-3129★ 0githubgithub.com/cchiaravalentini/CVE-2021-3129★ 0githubgithub.com/Prabesh01/hoh4★ 0githubgithub.com/hupe1980/CVE-2021-3129★ 0githubgithub.com/Zoo1sondv/CVE-2021-3129★ 0githubgithub.com/banyaksepuh/Mass-CVE-2021-3129-Scanner★ 0githubgithub.com/CyberCTF/vulhub-laravel-cve-2021-3129★ 0vulncheckvulncheck.com/xdb/fcb02bd261dbunverifiedvulncheckvulncheck.com/xdb/e9d83dcde53dunverifiedvulncheckvulncheck.com/xdb/d69431f93556unverifiedvulncheckvulncheck.com/xdb/570147c7cbc0unverifiedvulncheckvulncheck.com/xdb/3a52a9c9227funverifiedvulncheckvulncheck.com/xdb/504b16c118c4unverifiedvulncheckvulncheck.com/xdb/8773f8dc585aunverifiedvulncheckvulncheck.com/xdb/47a1b3108a7cunverifiedvulncheckvulncheck.com/xdb/6f534d028d6funverifiedvulncheckvulncheck.com/xdb/b58398140e57unverifiedvulncheckvulncheck.com/xdb/76a6df778206unverifiedvulncheckvulncheck.com/xdb/ca8748e2b909unverifiedvulncheckvulncheck.com/xdb/78b35be1dc24unverifiedvulncheckvulncheck.com/xdb/f500f5c13d9cunverifiedvulncheckvulncheck.com/xdb/9612bcbc8150unverifiedvulncheckvulncheck.com/xdb/633a39ff42e5unverifiedvulncheckvulncheck.com/xdb/3f630a9ea757unverifiedvulncheckvulncheck.com/xdb/5f4cc8cb7fe8unverifiedvulncheckvulncheck.com/xdb/9a17d0a89e57unverifiedvulncheckvulncheck.com/xdb/d4c406d658a9unverifiedvulncheckvulncheck.com/xdb/db67e867eebdunverifiedvulncheckvulncheck.com/xdb/8d11909030a5unverifiedvulncheckvulncheck.com/xdb/bb9ba40b9c86unverifiedvulncheckvulncheck.com/xdb/f037164fe4f2unverifiedvulncheckvulncheck.com/xdb/7595150eaf2cunverifiedvulncheckvulncheck.com/xdb/87edd3bbabdfunverifiedvulncheckvulncheck.com/xdb/131bacbc2679unverifiedvulncheckvulncheck.com/xdb/05a0424b5115unverifiedvulncheckvulncheck.com/xdb/8168517a0701unverifiedvulncheckvulncheck.com/xdb/0ba162fd5c5bunverifiedcve_referencepacketstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/c4bb3038800dunverifiedcve_referencepacketstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.htmlunverifiedvulncheckvulncheck.com/xdb/5ec73c71abdcunverifiedvulncheckvulncheck.com/xdb/4b3627899025unverifiedvulncheckvulncheck.com/xdb/0f3a032cb75bunverifiedvulncheckvulncheck.com/xdb/686106caeaabunverifiedvulncheckvulncheck.com/xdb/a310e9e90d01unverifiedvulncheckvulncheck.com/xdb/d6fabfe71d88unverifiedvulncheckvulncheck.com/xdb/35724c55fdc0unverifiedvulncheckvulncheck.com/xdb/067f7c923e08unverifiedvulncheckvulncheck.com/xdb/ef7d2df1ab88unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.