Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gfh8-gfv4-8h9v

Опубликовано: 16 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 8.4
CVSS3: 8.4

Описание

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication.

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication.

EPSS

Процентиль: 6%
0.00024
Низкий

8.4 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-732

Связанные уязвимости

CVSS3: 8.4
nvd
24 дня назад

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without additional authentication.

EPSS

Процентиль: 6%
0.00024
Низкий

8.4 High

CVSS4

8.4 High

CVSS3

Дефекты

CWE-732