RCE in Laravel Pulse
CVE-2024-55661
Laravel Pulse is a real-time application performance monitoring tool and dashboard for Laravel applications. A vulnerability has been discovered in Laravel Pulse prior to version 1.3.1 that could allow remote code execution through the pub…
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.570 (98.2th percentile) — read the EPSS interpretation.
Affected products
- Laravel Pulse — versions < 1.3.1
Weakness classification (CWE)
Public proof-of-concept exploits
References
- https://github.com/laravel/pulse/security/advisories/GHSA-8vwh-pr89-4mw2 (x_refsource_CONFIRM)
- https://github.com/laravel/pulse/commit/d1a5bf2eca36c6e3bedb4ceecd45df7d002a1ebc (x_refsource_MISC)
Frequently asked questions
- What is CVE-2024-55661?
- CVE-2024-55661 is a vulnerability in Laravel Pulse, classified under Code Injection. Published 2024-12-13.
- Is CVE-2024-55661 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.