Laravel Cookie serialization vulnerability

2024-05-1522:15:07

CWE-502

GitHub Advisory Database

github.com

laravel

security release

encryption

serialization

upgrade

7.1 High

AI Score

Confidence

Low

JSON

Laravel 5.6.30 is a security release of Laravel and is recommended as an immediate upgrade for all users. Laravel 5.6.30 also contains a breaking change to cookie encryption and serialization logic. Refer to laravel advisory for more details and read the notes carefully when upgrading your application.

CPENameOperatorVersion
laravel/frameworklt5.6.30

CPE	Name	Operator	Version
	laravel/framework	lt	5.6.30

References

github.com/advisories/GHSA-6jvx-8ch9-j2jr

github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/2018-08-08-1.yaml

laravel.com/docs/5.6/upgrade#upgrade-5.6.30

7.1 High

AI Score

Confidence

Low

JSON