laravel/framework vulnerabilities (Packagist)
23 vulnerabilities.
-
laravel/frameworkPackagist Laravel TokenGuard authentication bypass through non-string API credentials 9.2 Critical -
laravel/frameworkPackagist Laravel relationship inclusion can trigger unauthorized data destruction 6.5 Medium -
laravel/frameworkPackagist Laravel: XSS in Debug Page Information 3.1 Low -
laravel/frameworkPackagist CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay 8.9 High -
laravel/frameworkPackagist Laravel Reflected XSS via Route Parameter in Debug-Mode Error Page 8.0 High -
laravel/frameworkPackagist Laravel Reflected XSS via Request Parameter in Debug-Mode Error Page 8.0 High -
laravel/frameworkPackagist Laravel Guard bypass in Eloquent models No score -
laravel/frameworkPackagist Laravel Cross-site Scripting (XSS) vulnerability in blade templating 4.3 Medium -
laravel/frameworkPackagist Laravel Cookie serialization vulnerability No score -
laravel/frameworkPackagist Laravel Hijacked authentication cookies vulnerability No score -
laravel/frameworkPackagist Laravel Risk of mass-assignment vulnerabilities No score -
laravel/frameworkPackagist Laravel has a File Validation Bypass 6.9 Medium -
laravel/frameworkPackagist Laravel allows environment manipulation via query string 8.7 High -
laravel/frameworkPackagist Blade `@parent` Exploitation Leading To Possible XSS in Laravel 5.3 Medium -
laravel/frameworkPackagist Withdrawn: Laravel Framework does not sufficiently block the upload of executable PHP content. 9.8 Critical -
laravel/frameworkPackagist SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database 8.8 High -
laravel/frameworkPackagist Query Binding Exploitation in Laravel 7.2 High -
laravel/frameworkPackagist SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database 7.5 High -
laravel/frameworkPackagist Laravel Framework Deserialization Vulnerability 9.8 Critical -
laravel/frameworkPackagist Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior 8.1 High -
laravel/frameworkPackagist In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as... 7.5 High -
laravel/frameworkPackagist Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior 5.9 Medium -
laravel/frameworkPackagist Laravel does not properly constrain the host portion of a password-reset URL 6.1 Medium