Login Request a demo
IG
Product
Ignition
by Facade · last CVE Nov 17, 2021
On CISA KEVExploited in the wildRansomware-linked
3
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 3High 0Medium 0Low 0
Severity
All severities3Critical3High0Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Ignition to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-3129
RansomwareIn wildKEV
9.8
100%
Jan 12
Laravel Ignition File Upload Vulnerability
Affected: before 2.5.2
CVE-2021-43996
9.8
2%
Nov 17
The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a "fix variable names" feature that can lead to incorrect access control
Affected: before 1.6.15; 2.0.0 before 2.0.6
CVE-2020-13909
9.8
2%
Jun 7
The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env
Affected: 1.0.0 before 1.16.15; 2.0.0 before 2.0.5
Showing 3