3 matches found
User (Encrypted) Password Field Being Serialised
Impact Leaking Password field during serialisation of the User model. Password is in the encrypted form but if User model is requested in json or array form the value is printed. Patches Issue has been patched in version 0.3.7-beta and onwards. Workarounds Add the 'password' field to the Users...
GHSA-7FJP-G4M7-FX23 User (Encrypted) Password Field Being Serialised
Impact Leaking Password field during serialisation of the User model. Password is in the encrypted form but if User model is requested in json or array form the value is printed. Patches Issue has been patched in version 0.3.7-beta and onwards. Workarounds Add the 'password' field to the Users...
PT-2021-24392
Name of the Vulnerable Software and Affected Versions: Laravel Core versions prior to 0.3.7-beta Description: The issue involves the leaking of the password field during the serialization of the User model. Although the password is in encrypted form, it can be printed if the User model is request...