LaraDashboard Remote Code Execution Vulnerability via Host Header Injection

A remote code execution vulnerability has been identified in LaraDashboard versions through 2.3.0. This issue arises because the password reset process relies on the Host header, allowing attackers to redirect the administrator's reset token to a server they control. Exploiting this vulnerability is possible by combining it with the module installation process, which automatically executes the ServiceProvider::boot() method, thereby enabling the execution of arbitrary PHP code.

Impact

Exploitation of this vulnerability allows for pre-authentication remote code execution on the server.

Remediation

Users can update to LaraDashboard version 2.3.1 or later, where this vulnerability has been patched.