code16/sharp: Arbitrary class instantiation through the embed_key API parameter

Impact An authenticated attacker can instantiate any class in the PHP application by using the embedkey parameter across multiple API endpoints. The instantiation is performed by the Laravel container. As a result, the construct method of the class is called and all constructor dependencies are...

GHSA-H24V-F482-8CWF code16/sharp: Arbitrary class instantiation through the embed_key API parameter

Impact An authenticated attacker can instantiate any class in the PHP application by using the embedkey parameter across multiple API endpoints. The instantiation is performed by the Laravel container. As a result, the construct method of the class is called and all constructor dependencies are...