Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
288 results · page 6 of 6
Dec 7, 2021Laravel is a web application framework.CVE-2021-43808 · Other software · laravel · reported by GitHubMedium 5.3
Laravel is a web application framework. Laravel prior to versions 8.75.0, 7.30.6, and 6.20.42 contain a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. A broken HTML element may be clicked and the user taken to another location in their browser due to XSS. This is due to the user being able to guess the parent placeholder SHA-1 hash by trying common names of sections. If the parent template contains an exploitable HTML structure an XSS vulnerability can be exposed. This vulnerability has been patched in versions 8.75.0, 7.30.6, and 6.20.42 by determining the parent placeholder at runtime and using a random hash that is unique to each request.
- Product
- framework
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 17, 2021The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a "fix variable names" feature that can lead to incorrect access control.CVE-2021-43996 · Other software · Facade · reported by MITRECritical 9.8
The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a "fix variable names" feature that can lead to incorrect access control.
- Product
- Ignition
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 14, 2021Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.phpCVE-2021-43617 · Other software · Laravel · reported by MITRECritical 9.8
Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, which are handled as application/x-httpd-php on systems based on Debian. NOTE: this CVE Record is for Laravel Framework, and is unrelated to any reports concerning incorrectly written user applications for image upload.
- Product
- Framework
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comsalsa.debian.org
Oct 6, 2021October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework.CVE-2021-41126 · Other software · octobercms · reported by GitHubHigh 7.2
October is a Content Management System (CMS) and web platform built on the the Laravel PHP Framework. In affected versions administrator accounts which had previously been deleted may still be able to sign in to the backend using October CMS v2.0. The issue has been patched in v2.1.12 of the october/october package. There are no workarounds for this issue and all users should update.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comoctobercms.com
Oct 4, 2021Laravel Booking System Booking Core 2.0 is vulnerable to Session Management.CVE-2021-37333 · Other software · Bookingcore · reported by MITRECritical 9.8
Laravel Booking System Booking Core 2.0 is vulnerable to Session Management. A password change at sandbox.bookingcore.org/user/profile/change-password does not invalidate a session that is opened in a different browser.
- Product
- Booking Core
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnavidkagalwalla.comnavidkagalwalla.com
Oct 4, 2021Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control.CVE-2021-37331 · Other software · Bookingcore · reported by MITREMedium 5.3
Laravel Booking System Booking Core 2.0 is vulnerable to Incorrect Access Control. On the Verifications page, after uploading an ID Card or Trade License and viewing it, ID Cards and Trade Licenses of other vendors/users can be viewed by changing the URL.
- Product
- Booking Core
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnavidkagalwalla.comnavidkagalwalla.com
Oct 4, 2021Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS).CVE-2021-37330 · Other software · Bookingcore · reported by MITREMedium 5.4
Laravel Booking System Booking Core 2.0 is vulnerable to Cross Site Scripting (XSS). The Avatar upload in the My Profile section could be exploited to upload a malicious SVG file which contains Javascript. Now if another user/admin views the profile and clicks to view his avatar, an XSS will trigger.
- Product
- Booking Core
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordnavidkagalwalla.comnavidkagalwalla.com
Aug 30, 2021Total.js framework (npm package total.js) is a framework for Node.js platfrom written in pure JavaScript similar to PHP's Laravel or Python's Django or ASP.NET CVE-2021-32831 · Other software · totaljs · reported by GitHubHigh 7.5
Total.js framework (npm package total.js) is a framework for Node.js platfrom written in pure JavaScript similar to PHP's Laravel or Python's Django or ASP.NET MVC. In total.js framework before version 3.4.9, calling the utils.set function with user-controlled values leads to code-injection. This can cause a variety of impacts that include arbitrary code execution. This is fixed in version 3.4.9.
- Product
- framework
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 26, 2021octobercms in a CMS platform based on the Laravel PHP Framework.CVE-2021-29487 · Other software · octobercms · reported by GitHubHigh 7.4
octobercms in a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can exploit this vulnerability to bypass authentication and takeover of and user account on an October CMS server. The vulnerability is exploitable by unauthenticated users via a specially crafted request. This only affects frontend users and the attacker must obtain a Laravel secret key for cookie encryption and signing in order to exploit this vulnerability. The issue has been patched in Build 472 and v1.1.5.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 27, 2021Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework.CVE-2021-32645 · Other software · tenancy · reported by GitHubMedium 6.1
Tenancy multi-tenant is an open source multi-domain controller for the Laravel web framework. In some situations, it is possible to have open redirects where users can be redirected from your site to any other site using a specially crafted URL. This is only the case for installations where the default Hostname Identification is used and the environment uses tenants that have `force_https` set to `true` (default: `false`). Version 5.7.2 contains the relevant patches to fix this bug. Stripping the URL from special characters to prevent specially crafted URL's from being redirected to. As a work around users can set the `force_https` to every tenant to `false`, however this may degrade connection security.
- Product
- multi-tenant
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 12, 2021An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.CVE-2020-23790 · Other software · Uxper · reported by MITRECritical 9.8
An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.
- Product
- Golo
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcodecanyon.netgithub.com
May 3, 2021October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.CVE-2021-21264 · Other software · octobercms · reported by GitHubMedium 5.2
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-26231 (fixed in 1.0.470/471 and 1.1.1) was discovered that has the same impact as CVE-2020-26231 & CVE-2020-15247. An authenticated backend user with the `cms.manage_pages`, `cms.manage_layouts`, or `cms.manage_partials` permissions who would **normally** not be permitted to provide PHP code to be executed by the CMS due to `cms.enableSafeMode` being enabled is able to write specific Twig code to escape the Twig sandbox and execute arbitrary PHP. This is not a problem for anyone that trusts their users with those permissions to normally write & manage PHP within the CMS by not having `cms.enableSafeMode` enabled, but would be a problem for anyone relying on `cms.enableSafeMode` to ensure that users with those permissions in production do not have access to write & execute arbitrary PHP. Issue has been patched in Build 472 (v1.0.472) and v1.1.2. As a workaround, apply https://github.com/octobercms/october/commit/f63519ff1e8d375df30deba63156a2fc97aa9ee7 to your installation manually if unable to upgrade to Build 472 or v1.1.2.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 10, 2021October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.CVE-2021-21265 · Other software · octobercms · reported by GitHubMedium 6.8
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1.1.2, when running on poorly configured servers (i.e. the server routes any request, regardless of the HOST header to an October CMS instance) the potential exists for Host Header Poisoning attacks to succeed. This has been addressed in version 1.1.2 by adding a feature to allow a set of trusted hosts to be specified in the application. As a workaround one may set the configuration setting cms.linkPolicy to force.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 3, 2021In Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel 6, 7.30.1-debian-10-r108 for Laravel 7 and 8.5.11-debian-10-r0CVE-2021-21979 · Other software · Bitnami · reported by security@vmware.comHigh 7.3
In Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel 6, 7.30.1-debian-10-r108 for Laravel 7 and 8.5.11-debian-10-r0 for Laravel 8, the file /tmp/app/.env is generated at the time that the docker image bitnami/laravel was built, and the value of APP_KEY is fixed under certain conditions. This value is crucial for the security of the application and must be randomly generated per Laravel installation. If your application's encryption key is in the hands of a malicious party, that party could craft cookie values using the encryption key and exploit vulnerabilities inherent to PHP object serialization / unserialization, such as calling arbitrary class methods within your application.
- Product
- Containers
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 19, 2021Laravel is a web application framework.CVE-2021-21263 · Other software · laravel · reported by GitHubHigh 7.2
Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results.
- Product
- framework
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.laravel.comgithub.com
Jan 12, 2021Laravel Ignition File Upload VulnerabilityCVE-2021-3129 · Other software · Laravel · reported by MITREExploitedRansomwareCritical 9.8
Laravel Ignition contains a file upload vulnerability that allows unauthenticated remote attackers to execute malicious code due to insecure usage of file_get_contents() and file_put_contents().
- Product
- Ignition
- On CISA’s list since
- Sep 18, 2023 (federal fix deadline Oct 9, 2023)
- What to do
- Attackers are using this now. Install Laravel’s update today (ransomware groups use this one). If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogpacketstormsecurity.compacketstormsecurity.com
Nov 23, 2020October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.CVE-2020-26231 · Other software · octobercms · reported by GitHubMedium 5.2
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-15247 (fixed in 1.0.469 and 1.1.0) was discovered that has the same impact as CVE-2020-15247. An authenticated backend user with the cms.manage_pages, cms.manage_layouts, or cms.manage_partials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.enableSafeMode being enabled is able to write specific Twig code to escape the Twig sandbox and execute arbitrary PHP. This is not a problem for anyone that trusts their users with those permissions to normally write & manage PHP within the CMS by not having cms.enableSafeMode enabled, but would be a problem for anyone relying on cms.enableSafeMode to ensure that users with those permissions in production do not have access to write & execute arbitrary PHP. Issue has been patched in Build 470 (v1.0.470) and v1.1.1.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 23, 2020October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.CVE-2020-15249 · Other software · octobercms · reported by GitHubLow 2.8
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.319 and before version 1.0.469, backend users with access to upload files were permitted to upload SVG files without any sanitization applied to the uploaded files. Since SVG files support being parsed as HTML by browsers, this means that they could theoretically upload Javascript that would be executed on a path under the website's domain (i.e. /storage/app/media/evil.svg), but they would have to convince their target to visit that location directly in the target's browser as the backend does not display SVGs inline anywhere, SVGs are only displayed as image resources in the backend and are thus unable to be executed. Issue has been patched in Build 469 (v1.0.469) & v1.1.0.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 23, 2020October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.CVE-2020-15248 · Other software · octobercms · reported by GitHubMedium 4
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.319 and before version 1.0.470, backend users with the default "Publisher" system role have access to create & manage users where they can choose which role the new user has. This means that a user with "Publisher" access has the ability to escalate their access to "Developer" access. Issue has been patched in Build 470 (v1.0.470) & v1.1.1.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 23, 2020October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.CVE-2020-15247 · Other software · octobercms · reported by GitHubMedium 5.2
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.319 and before version 1.0.469, an authenticated backend user with the cms.manage_pages, cms.manage_layouts, or cms.manage_partials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to cms.enableSafeMode being enabled is able to write specific Twig code to escape the Twig sandbox and execute arbitrary PHP. This is not a problem for anyone that trusts their users with those permissions to normally write & manage PHP within the CMS by not having cms.enableSafeMode enabled, but would be a problem for anyone relying on cms.enableSafeMode to ensure that users with those permissions in production do not have access to write & execute arbitrary PHP. Issue has been patched in Build 469 (v1.0.469) and v1.1.0.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 23, 2020October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework.CVE-2020-15246 · Other software · octobercms · reported by GitHubHigh 7.5
October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.421 and before version 1.0.469, an attacker can read local files on an October CMS server via a specially crafted request. Issue has been patched in Build 469 (v1.0.469) and v1.1.0.
- Product
- october
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 3, 2020An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0.CVE-2020-24941 · Other software · Laravel · reported by MITREHigh 7.5
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.
- Product
- Laravel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.laravel.comblog.laravel.com
Sep 3, 2020An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2.CVE-2020-24940 · Other software · Laravel · reported by MITREHigh 7.5
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
- Product
- Laravel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordblog.laravel.comblog.laravel.com
Jun 7, 2020The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env.CVE-2020-13909 · Other software · Facade · reported by MITRECritical 9.8
The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env. NOTE: in the 1.x series, versions 1.16.15 and later are unaffected as a consequence of the CVE-2021-43996 fix.
- Product
- Ignition
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 25, 2020FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_image/image/file_upload CVE-2020-10963 · Other software · Frozennode · reported by MITREHigh 7.2
FrozenNode Laravel-Administrator through 5.0.12 allows unrestricted file upload (and consequently Remote Code Execution) via admin/tips_image/image/file_upload image upload with PHP content within a GIF image that has the .php extension. NOTE: this product is discontinued.
- Product
- Laravel-administrator
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comxavibel.com
Oct 10, 2019laravel-bjyblog 6.1.1 has XSS via a crafted URL.CVE-2019-17494 · Other software · Laravel-bjyblog Project · reported by MITREMedium 6.1
laravel-bjyblog 6.1.1 has XSS via a crafted URL.
- Product
- Laravel-bjyblog
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Oct 10, 2019z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.CVE-2019-17433 · Other software · Laravel-admin · reported by MITREMedium 4.8
z-song laravel-admin 1.7.3 has XSS via the Slug or Name on the Roles screen, because of mishandling on the "Operation log" screen.
- Product
- Laravel-admin
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 30, 2019An issue was discovered in the Voyager package through 1.2.7 for Laravel.CVE-2019-17050 · Other software · Thecontrolgroup · reported by MITREHigh 7.2
An issue was discovered in the Voyager package through 1.2.7 for Laravel. An attacker with admin privileges and Compass access can read or delete arbitrary files, such as the .env file. NOTE: a software maintainer has suggested a solution in which Compass is switched off in a production environment.
- Product
- Voyager
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 26, 2019laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS.CVE-2019-15489 · Other software · Laracom · reported by MITREMedium 6.1
laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS.
- Product
- Laracom
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 8, 2019The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.CVE-2018-20962 · Other software · Backpackforlaravel · reported by MITREMedium 6.1
The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.
- Product
- Backpack\crud
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Mar 28, 2019Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters.CVE-2018-6330 · Other software · Laravel · reported by MITREHigh 8.8
Laravel 5.4.15 is vulnerable to Error based SQL injection in save.php via dhx_user and dhx_version parameters.
- Product
- Framework
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorditblog.gbonanno.degithub.com
Oct 31, 2018An issue was discovered in laravelCMS through 2018-04-02.CVE-2018-18888 · Other software · Laravelcms Project · reported by MITRECritical 9.8
An issue was discovered in laravelCMS through 2018-04-02. \app\Http\Controllers\Backend\ProfileController.php allows upload of arbitrary PHP files because the file extension is not properly checked and uploaded files are not properly renamed.
- Product
- Laravelcms
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Aug 9, 2018Laravel Deserialization of Untrusted Data VulnerabilityCVE-2018-15133 · Other software · Laravel · reported by MITREExploitedHigh 8.1
Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).
- Product
- Laravel Framework
- On CISA’s list since
- Jan 16, 2024 (federal fix deadline Feb 6, 2024)
- What to do
- Attackers are using this now. Install Laravel’s update today. If there is no update for your version, take the product off the internet or stop using it until there is.
Full record and what to do →NVD recordCISA catalogpacketstormsecurity.comlaravel.com
Mar 25, 2018rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intendCVE-2018-8947 · Other software · Laravel LOG Viewer Project · reported by MITREHigh 7.5
rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request.
- Product
- Laravel LOG Viewer
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 19, 2017In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env CVE-2017-16894 · Other software · Laravel · reported by MITREHigh 7.5
In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as externally usable passwords) via a direct request for the /.env URI. NOTE: this CVE is only about Laravel framework's writeNewEnvironmentFileWith function in src/Illuminate/Foundation/Console/KeyGenerateCommand.php, which uses file_put_contents without restricting the .env permissions. The .env filename is not used exclusively by Laravel framework.
- Product
- Laravel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpacketstormsecurity.comwhiteboyz.xyz
Sep 27, 2017Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.CVE-2017-14775 · Other software · Laravel · reported by MITREMedium 5.9
Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.
- Product
- Laravel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Sep 26, 2017Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authentCVE-2017-14704 · Other software · Claydip · reported by MITREHigh 8.8
Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/profile.
- Product
- Airbnb Clone
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordexploit-db.comexploit-db.com
May 29, 2017Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishingCVE-2017-9303 · Other software · Laravel · reported by MITREMedium 6.1
Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host.
- Product
- Laravel
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurityfocus.comlaravel-news.com
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.