CVE-2021-43617

Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, which are handled as application/x-httpd-php on systems based on Debian. NOTE: this CVE Record is for...

PT-2021-5219

Name of the Vulnerable Software and Affected Versions Laravel Framework versions through 8.70.2 Description The issue is related to the insufficient blocking of executable PHP content uploads. Specifically, Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, whic...

CVE-2021-43617: Unrestricted Upload of File with Dangerous Type

Laravel Framework through 8.70.2 does not sufficiently block the upload of executable PHP content because Illuminate/Validation/Concerns/ValidatesAttributes.php lacks a check for .phar files, which are handled as application/x-httpd-php on systems based on Debian. NOTE: this CVE Record is for...