Approved changes feed: RSS · Atom
cpe:2.3:a:facade:ignition:*:*:*:*:*:laravel:*:*part: a version: * update: *
| Vendor | Facade (c8c2a144-4505-5392-8098-72097747cb2d) |
|---|---|
| Product | Ignition (75931594-aeb9-5a5b-b77e-a6403a8bd6c1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | laravel |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/facade/ignition |
purl2cpe | 2026-06-01 10:16:01.342103 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43996 |
vulnerable | 2026-06-08 05:36:44.718289 |
Details available
The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a "fix variable names" feature that can lead to incorrect access control.
Published: 2021-11-17T19:17:55.000Z
Updated: 2024-08-04T04:10:16.386Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3129 |
vulnerable | 2026-06-08 05:33:50.859079 |
Details available
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2.
Published: 2021-01-12T14:07:38.000Z
Updated: 2025-10-21T23:35:30.227Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-13909 |
vulnerable | 2026-06-08 05:18:01.324139 |
Details available
The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix.
Published: 2020-06-07T19:26:47.000Z
Updated: 2024-08-04T12:32:14.312Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.