CVE-2021-21263

🗓️ 19 Jan 2021 20:13:15Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 136 Views

Laravel web framework before 6.20.11, 7.30.2, 8.22.1 is vulnerable to query binding exploitation

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 13
NVD	CVE-2021-21263	19 Jan 202120:15	–	nvd
Debian CVE	CVE-2021-21263	19 Jan 202120:15	–	debiancve
Friends Of PHP	Unexpected bindings in QueryBuilder	13 Jan 202014:35	–	friendsofphp
Friends Of PHP	Unexpected bindings in QueryBuilder	13 Jan 202014:35	–	friendsofphp
OSV	BIT-laravel-2021-21263	6 Mar 202410:55	–	osv
OSV	CVE-2021-21263	19 Jan 202120:15	–	osv
OSV	Query Binding Exploitation	19 Jan 202119:36	–	osv
Veracode	Query Binding Exploitation	20 Jan 202102:15	–	veracode
Veracode	Query Binding Exploitation	3 Feb 202104:49	–	veracode
Github Security Blog	Query Binding Exploitation	19 Jan 202119:36	–	github

Nvd

Vulners

Node

laravel laravelRange6.0.0–6.20.11

laravel laravelRange7.0.0–7.30.2

laravel laravelRange8.0.0–8.22.1

[
  {
    "product": "framework",
    "vendor": "laravel",
    "versions": [
      {
        "status": "affected",
        "version": ">= 6.0.0, < 6.20.11"
      },
      {
        "status": "affected",
        "version": ">= 7.0.0, < 7.30.2"
      },
      {
        "status": "affected",
        "version": ">= 8.0.0, < 8.22.1"
      }
    ]
  }
]

Source	Link
github	www.github.com/laravel/framework/pull/35865
packagist	www.packagist.org/packages/laravel/framework
github	www.github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x
packagist	www.packagist.org/packages/illuminate/database
blog	www.blog.laravel.com/security-laravel-62011-7302-8221-released

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jan 2021 20:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS25

CVSS35.3 - 7.2

EPSS0.02179