2 matches found
GHSA-3P32-J457-PG5X Query Binding Exploitation
Description Laravel versions 6.20.12, 7.30.3 & 8.22.1 contain a query binding exploitation. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected...
7.2CVSS5.7AI score0.01605EPSS
SaveExploits0References9
Query Binding Exploitation
Description Laravel versions 6.20.12, 7.30.3 & 8.22.1 contain a query binding exploitation. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected...
7.2CVSS0.5AI score0.01605EPSS
SaveExploits0References10Affected Software2
20