CVE-2018-20962

2019-08-0820:15:11

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.4%

The Backpack\CRUD Backpack component before 3.4.9 for Laravel allows XSS via the select field type.

CPENameOperatorVersion
crudeq3.1.4
crudeq3.1.47
crudeq2.0.7
crudeq3.2.7
crudeq3.0.3
crudeq3.0.10
crudeq0.4.1
crudeq3.1.31
crudeq0.8.7
crudeq3.0.5

Name	Operator	Version
crud	eq	3.1.4
crud	eq	3.1.47
crud	eq	2.0.7
crud	eq	3.2.7
crud	eq	3.0.3
crud	eq	3.0.10
crud	eq	0.4.1
crud	eq	3.1.31
crud	eq	0.8.7
crud	eq	3.0.5

Rows per page:

1-10 of 2071

References

github.com/Laravel-Backpack/CRUD/blob/master/CHANGELOG.md

github.com/Laravel-Backpack/CRUD/commit/8b6bd0a2d489a4690f6b1d7ace67e2f07f5f0cc6

github.com/Laravel-Backpack/CRUD/compare/3.4.8...3.4.9

github.com/Laravel-Backpack/CRUD/issues/1297