backpack/crud vulnerabilities (Packagist)
11 vulnerabilities.
-
backpack/crudPackagist backpack/crud: HasMany/MorphMany relation fields allow cross-tenant record re-parenting (IDOR) via attachManyRelation 6.5 Medium -
backpack/crudPackagist backpack/crud: OS command injection in Stats::makeCurlRequest via attacker-controlled Host header (pre-auth) 8.1 High -
backpack/crudPackagist backpack/crud: Stored XSS in the color column — the `@if($column['escaped'])` branches are inverted 5.4 Medium -
backpack/crudPackagist backpack/crud: CRUD panel query scopes are not enforced on Update, Delete, and Reorder (cross-tenant IDOR) 7.6 High -
backpack/crudPackagist backpack/crud: SingleBase64Image accepts any base64 payload behind a `data:image` prefix — SVG-with-script lands on the public disk 4.4 Medium -
backpack/crudPackagist backpack/crud: Arbitrary file deletion via attacker-controlled clear_<attr>[] in HasUploadFields::uploadMultipleFilesToDisk 8.1 High -
backpack/crudPackagist backpack/crud: HasUploadFields keeps the attacker-supplied file extension — public-disk uploads of `shell.php` reach the webserver 6.6 Medium -
backpack/crudPackagist backpack/crud: MyAccountController allows changing the login email without a current-password check 6.5 Medium -
backpack/crudPackagist backpack/crud: Unverified password change in MyAccountController via mass assignment 7.6 High -
backpack/crudPackagist backpack/crud Vulnerable to Cross-site Scripting 5.1 Medium -
backpack/crudPackagist Backpack\CRUD for Laravel XSS Vulnerability 6.1 Medium