Lucene search

K
prionPRIOn knowledge basePRION:CVE-2018-8947
HistoryMar 25, 2018 - 4:29 p.m.

Design/Logic Flaw

2018-03-2516:29:00
PRIOn knowledge base
www.prio-n.com
5

7.5 High

AI Score

Confidence

High

0.064 Low

EPSS

Percentile

93.7%

rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request.

CPENameOperatorVersion
laravel_log_viewerlt0.13.0

7.5 High

AI Score

Confidence

High

0.064 Low

EPSS

Percentile

93.7%