Lucene search

CVE-2021-21263

🗓️ 19 Jan 2021 20:13:15Reported by [email protected]Type

Laravel < 6.20.11, 7.30.2, 8.22.1 query binding exploitatio

Reporter	Title	Published	Views	Family All 13
Debian CVE	CVE-2021-21263	19 Jan 202120:15	–	debiancve
Veracode	Query Binding Exploitation	20 Jan 202102:15	–	veracode
Veracode	Query Binding Exploitation	3 Feb 202104:49	–	veracode
OSV	BIT-laravel-2021-21263	6 Mar 202410:55	–	osv
OSV	CVE-2021-21263	19 Jan 202120:15	–	osv
OSV	Query Binding Exploitation	19 Jan 202119:36	–	osv
Friends Of PHP	Unexpected bindings in QueryBuilder	13 Jan 202014:35	–	friendsofphp
Friends Of PHP	Unexpected bindings in QueryBuilder	13 Jan 202014:35	–	friendsofphp
Github Security Blog	Query Binding Exploitation	19 Jan 202119:36	–	github
UbuntuCve	CVE-2021-21263	19 Jan 202100:00	–	ubuntucve

Nvd

Node

laravel laravelRange6.0.0–6.20.11

laravel laravelRange7.0.0–7.30.2

laravel laravelRange8.0.0–8.22.1

Source	Link
packagist	www.packagist.org/packages/laravel/framework
github	www.github.com/laravel/framework/pull/35865
blog	www.blog.laravel.com/security-laravel-62011-7302-8221-released
github	www.github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x
packagist	www.packagist.org/packages/illuminate/database

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

19 Jan 2021 20:15Current

6.8Medium risk

Vulners AI Score6.8

CVSS25

CVSS35.3

EPSS0.00115