PT-2021-10949 · Laravel · Golo Laravel Theme

Published 2021-05-12 · Updated 2021-09-09 · CVE-2020-23790

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Golo Laravel theme version 1.1.5

Description: An Arbitrary File Upload issue was discovered. This allows for the upload of arbitrary files, which could lead to various security issues.

Recommendations: For Golo Laravel theme version 1.1.5, update to a version that fixes this issue, if available. As a temporary workaround, consider restricting file upload capabilities to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2020-23790

Affected Products

Golo Laravel Theme

References · 5

• 🔥❌ https://github.com/vladvector/vladvector.github.io/blob/master/exploit/2020-07-02-golo-business-listing-city-travel-guide-laravel-theme-v1-1-5.txt · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2020-23790 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-23790 · Security Note
• https://t.me/cvenotify/14300 · Telegram Post
• https://codecanyon.net/item/golo-city-guide-laravel-theme/25785389 · Note