Skip to content
OpenAdvisories

Package · Packagist

livewire/livewire

6 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.7
    CVE-2024-47823 Public exploit

    Livewire Remote Code Execution (RCE) on File Uploads

    Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP. In livewire/livewire prior to `2.12.7` and `v3.5.2`, the file extension of an uploaded file is guessed based on the MIME type. As a result, the actual fi…