4 matches found
CVE-2017-14775
Laravel before 5.5.10 mishandles the rememberme token verification process because DatabaseUserProvider does not have constant-time token comparison...
5.9CVSS6.8AI score0.01193EPSS
SaveExploits0References1
CVE-2017-14775
Laravel before 5.5.10 mishandles the rememberme token verification process because DatabaseUserProvider does not have constant-time token comparison...
5.9CVSS6.8AI score
SaveExploits0References3
CVE-2017-14775
CVE-2017-14775 affects Laravel before 5.5.10. The vulnerability arises because the remember_me token verification is mishandled: the DatabaseUserProvider does not use constant-time token comparison, enabling potential timing-based leakage. Affected software: Laravel (PHP framework) prior to 5.5.1...
5.9CVSS5.6AI score0.01193EPSS
SaveExploits0References3Affected Software1
20