CVE-2021-3129 PoC — Facade Ignition for Laravel 授权问题漏洞

Source

https://github.com/crisprss/Laravel_CVE-2021-3129_EXP

Associated Vulnerability

Title: Facade Ignition for Laravel 授权问题漏洞 (CVE-2021-3129)
Description:Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.

Readme

# Laravel_CVE-2021-3129_EXP
参考exp: https://github.com/SNCKER/CVE-2021-3129

## 版本要求
 Laravel Iginition == 2.5.1   
 通过EXP的本地版本 Laravel 8.4.2

## 注意事项
需要将该exp放置在phpgcc目录下，否则无法调用phpgcc

## exmaple
![image](https://github.com/crisprss/Laravel_CVE-2021-3129_EXP/blob/main/images/image.png)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →