Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
Livewire Remote Command Execution Vulnerability
Vulnerability
A remote command execution vulnerability exists in Livewire, a full-stack framework for Laravel, specifically in versions 3.0.0-beta.1 prior to 3.6.3. This vulnerability allows unauthenticated attackers to execute commands remotely under certain conditions. The issue arises from the way certain component property updates are processed, creating a scenario where exploitation is possible without authentication or user interaction. The vulnerability is exclusive to Livewire version 3 and does not impact earlier major releases.
Impact
Exploitation of this vulnerability allows for remote command execution on the server where the affected Livewire component is running.
Remediation
Users are strongly advised to upgrade to Livewire version 3.6.4 or later. Instructions for upgrading can be found in the Livewire GitHub repository.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.