CyberRota Analysis
AI-GeneratedLaraDashboard versions prior to 1.4.8 on Windows are susceptible to a path traversal vulnerability that enables unauthenticated attackers to access sensitive JSON files by exploiting the {lang} route segment. This could lead to the exposure of configuration and application data, potentially compromising the integrity of the application. Organizations using LaraDashboard should prioritize patching to mitigate the risk of unauthorized data access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the {lang} route segment. On Windows hosts, attackers can send URL-encoded backslash sequences like ..%5C to escape resources/lang and read composer.json or other application JSON files.