Описание
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| php-laravel-framework | not-affected | package |
Примечания
https://blog.laravel.com/security-release-laravel-61834-7232
EPSS
Процентиль: 49%
0.00261
Низкий
Связанные уязвимости
CVSS3: 7.5
nvd
около 5 лет назад
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
CVSS3: 7.5
github
больше 3 лет назад
Guard bypass in Eloquent models affecting Laravel illuminate database component
EPSS
Процентиль: 49%
0.00261
Низкий