Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101173
HistoryNov 16, 2021 - 12:00 a.m.

Laravel Framework has an unspecified vulnerability

2021-11-1600:00:00
China National Vulnerability Database
www.cnvd.org.cn
11

0.017 Low

EPSS

Percentile

87.9%

Laravel Framework is a PHP-based web application development framework from Taylor Otwell, a personal developer.A security vulnerability exists in versions of Laravel Framework prior to 8.70.2, which stems from the fact that the framework does not adequately prevent the upload of executable PHP content because Illuminate/ Validation/Concerns/ValidatesAttributes.php lacks checks for .phar files, which are handled as application/x-httpd-php on Debian-based systems. in some use cases, this could be related to the validation of file types for image uploads. No detailed vulnerability details are currently available.