CVE-2024-7495 – itsourcecode Laravel Accounting System HomeController.php unrestricted upload

https://notcve.org/view.php?id=CVE-2024-7495

A vulnerability, which was classified as critical, was found in itsourcecode Laravel Accounting System 1.0. This affects an unknown part of the file app/Http/Controllers/HomeController.php. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/DeepMountains/Mirage/blob/main/CVE13-1.md https://vuldb.com/?ctiid.273621 https://vuldb.com/?id.273621 https://vuldb.com/?submit.385829 • CWE-434: Unrestricted Upload of File with Dangerous Type •