Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/05/15 10:18 p.m.19 views

Laravel Guard bypass in Eloquent models

In laravel releases before 6.18.34 and 7.23.2. It was possible to mass assign Eloquent attributes that included the model's table name: $model-fill'users.name' = 'Taylor'; When doing so, Eloquent would remove the table name from the attribute for you. This was a "convenience" feature of Eloquent...

7.1AI score
SaveExploits0References3Affected Software1
Rows per page
Query Builder