Description
Lara Dashboard before 1.3.0 contains an authentication bypass vulnerability in the screenshot-login route that allows unauthenticated attackers to authenticate as any user by email when APP_ENV is not production. Attackers can request the GET /screenshot-login/{email} endpoint with a registered email address to receive a fully authenticated session, enabling access to user administration, settings, database contents, and arbitrary code execution through the module installer.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
laradashboard laradashboard
Default version status: unaffected
0 to < 1.3.0affected1.3.0unaffected
pkg:github/laradashboard/laradashboardReferences
- https://github.com/laradashboard/laradashboard/security/advisories/GHSA-wj35-4h53-phfp ↗
- https://github.com/laradashboard/laradashboard/commit/50986e4ac58c883dd8f064cf32be3e2a87c11b24 ↗
- https://github.com/laradashboard/laradashboard/blob/v1.2.2/app/Http/Controllers/Backend/Auth/ScreenshotGeneratorLoginController.php ↗
- https://github.com/laradashboard/laradashboard/releases/tag/v1.3.0 ↗
- https://github.com/laradashboard/laradashboard ↗
- https://www.vulncheck.com/advisories/lara-dashboard-before-1.3.0-missing-authentication-in-screenshot-login-route ↗