laravel/framework vulnerabilities (TuxCare)
16 vulnerabilities.
-
laravel/frameworkTuxCare Laravel TokenGuard authentication bypass through non-string API credentials 9.2 Critical -
laravel/frameworkTuxCare Laravel relationship inclusion can trigger unauthorized data destruction 6.5 Medium -
laravel/frameworkTuxCare Laravel: XSS in Debug Page Information 3.1 Low -
laravel/frameworkTuxCare TuxCare security update for laravel/framework (1 CVE) No score -
laravel/frameworkTuxCare CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay 8.9 High -
laravel/frameworkTuxCare Laravel has a File Validation Bypass 6.9 Medium -
laravel/frameworkTuxCare Laravel allows environment manipulation via query string 8.7 High -
laravel/frameworkTuxCare Blade `@parent` Exploitation Leading To Possible XSS in Laravel 5.3 Medium -
laravel/frameworkTuxCare Withdrawn: Laravel Framework does not sufficiently block the upload of executable PHP content. 9.8 Critical -
laravel/frameworkTuxCare SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database 8.8 High -
laravel/frameworkTuxCare Query Binding Exploitation in Laravel 7.2 High -
laravel/frameworkTuxCare SQL Server LIMIT / OFFSET SQL Injection in laravel/framework and illuminate/database 7.5 High -
laravel/frameworkTuxCare Laravel Framework Deserialization Vulnerability 9.8 Critical -
laravel/frameworkTuxCare Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior 8.1 High -
laravel/frameworkTuxCare In Laravel framework through 5.5.21, remote attackers can obtain sensitive information (such as... 7.5 High -
laravel/frameworkTuxCare Laravel Encrypter Component Potential Decryption Failure Leading to Unintended Behavior 5.9 Medium