EUVD-2021-0484

Malware in sbrugna...

PT-2024-40356 · Unknown · Laravel Framework

Name of the Vulnerable Software and Affected Versions: Laravel Framework affected versions not specified Description: The issue arises when a field, normally a non-array value, is crafted as an array in a request and this input is not validated or cast to its expected type before being passed to...

PT-2021-14371 · Laravel · Laravel

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 6.20.11 Laravel versions prior to 7.30.2 Laravel versions prior to 8.22.1 Description: The issue concerns a query binding exploitation in Laravel. If a request is crafted where a field that is normally a non-array...

Unexpected bindings in QueryBuilder

This is a follow-up to the previous security advisory GHSA-3p32-j457-pg5x which addresses a few additional edge cases. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the quer...