Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2024/05/15 10:5 p.m.13 views

Laravel Risk of mass-assignment vulnerabilities

Laravel 4.1.29 improves the column quoting for all database drivers. This protects your application from some mass assignment vulnerabilities when not using the fillable property on models. If you are using the fillable property on your models to protect against mass assignment, your application ...

7.2AI score
Exploits0References4Affected Software1
Github Security Blog
Github Security Blog
added 2024/05/15 9:53 p.m.11 views

Laravel Risk of mass-assignment vulnerabilities

Laravel 4.1.29 improves the column quoting for all database drivers. This protects your application from some mass assignment vulnerabilities when not using the fillable property on models. If you are using the fillable property on your models to protect against mass assignment, your application ...

7.2AI score
Exploits0References3Affected Software1
OSV
OSV
added 2024/05/15 9:53 p.m.11 views

GHSA-CC2W-GHC5-M5QR Laravel Risk of mass-assignment vulnerabilities

Laravel 4.1.29 improves the column quoting for all database drivers. This protects your application from some mass assignment vulnerabilities when not using the fillable property on models. If you are using the fillable property on your models to protect against mass assignment, your application ...

7.2AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/05/15 12:0 a.m.1 views

PT-2024-40241 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 4.1.29 Description: The issue concerns mass assignment vulnerabilities in Laravel when not using the fillable property on models or when using guarded and passing user-controlled arrays into update or save functions...

7.4AI score
Exploits0References4
CNNVD
CNNVD
added 2021/01/30 12:0 a.m.3 views

Terramaster TOS 操作系统命令注入漏洞

TerraMaster TOS is a Linux-based operating system developed for TerraMaster Cloud Storage NAS servers. A dynamic class method call vulnerability exists in include/exportUser.php in TerraMaster TOS versions prior to 4.1.29. The vulnerability stems from invalid parameter checking. An attacker can...

10CVSS7.5AI score0.93537EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2020/01/15 12:0 a.m.47 views

Debian DLA-2067-1 : wordpress security update

An input sanitization bypass was discovered in Wordpress, a popular content management framework. An attacker can use this flaw to send malicious scripts to an unsuspecting user. For Debian 8 'Jessie', this problem has been fixed in version 4.1.29+dfsg-0+deb8u1. We recommend that you upgrade your...

9.8CVSS7.7AI score0.01366EPSS
Exploits1References3
Rows per page
Query Builder