Lucene search

GoogleOSV:BIT-LARAVEL-2022-2870

HistoryMar 06, 2024 - 10:55 a.m.

BIT-laravel-2022-2870

2024-03-0610:55:19

Google

osv.dev

vulnerability

laravel

remote code execution

deserialization

exploit

disclosure

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

53.1%

JSON

A vulnerability was found in laravel 5.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206501 was assigned to this vulnerability.

References

github.com/beicheng-maker/vulns/issues/2

vuldb.com/?id.206501

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.8

Confidence

Low

EPSS

0.002

Percentile

53.1%

JSON

Related for OSV:BIT-LARAVEL-2022-2870