Lucene search

GitHub Advisory DatabaseGHSA-RC8X-JRRC-FRFV

HistoryMay 17, 2022 - 2:42 a.m.

Laravel does not properly constrain the host portion of a password-reset URL

2022-05-1702:42:21

CWE-20

GitHub Advisory Database

github.com

laravel

password reset

phishing

security vulnerability

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

43.2%

JSON

Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host.

Affected configurations

Vulners

Node

laravelframeworkRange5.4.0–5.4.22

laravelframeworkRange5.3.0–5.3.31

illuminateauthRange5.4.0–5.4.22

illuminateauthRange5.3.0–5.3.31

laravellaravelRange5.4.0–5.4.22

VendorProductVersionCPE
laravelframework*cpe:2.3:a:laravel:framework:*:*:*:*:*:*:*:*
illuminateauth*cpe:2.3:a:illuminate:auth:*:*:*:*:*:*:*:*
laravellaravel*cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
laravel	framework	*	cpe:2.3:a:laravel:framework::::::::
illuminate	auth	*	cpe:2.3:a:illuminate:auth::::::::
laravel	laravel	*	cpe:2.3:a:laravel:laravel::::::::

References

www.securityfocus.com/bid/98776

github.com/advisories/GHSA-rc8x-jrrc-frfv

github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/auth/CVE-2017-9303.yaml

github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2017-9303.yaml

github.com/laravel/framework/commit/cef10551820530632a86fa6f1306fee95c5cac43

laravel-news.com/laravel-5-4-22-is-now-released-and-includes-a-security-fix

laravel.com/docs/5.4/releases#laravel-5.4.22

nvd.nist.gov/vuln/detail/CVE-2017-9303

web.archive.org/web/20171021180417/www.securityfocus.com/bid/98776

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.9

Confidence

Low

EPSS

0.001

Percentile

43.2%

JSON

Related for GHSA-RC8X-JRRC-FRFV