1 matches found
Laravel relationship inclusion can trigger unauthorized data destruction
A vulnerability in how relationship inclusion is processed on certain read endpoints. Under specific conditions, a request to a read-only endpoint can be crafted to trigger a destructive database operation on a related table, rather than simply retrieving data. Impact A user with only read access...
6.5CVSS5.8AI score0.00306EPSS
SaveExploits0References9Affected Software1
20