Lucene search
+L

2 matches found

OSV
OSV
added 2021/01/19 7:36 p.m.20 views

GHSA-3P32-J457-PG5X Query Binding Exploitation

Description Laravel versions 6.20.12, 7.30.3 & 8.22.1 contain a query binding exploitation. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected...

7.2CVSS5.7AI score0.01605EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2021/01/19 7:36 p.m.127 views

Query Binding Exploitation

Description Laravel versions 6.20.12, 7.30.3 & 8.22.1 contain a query binding exploitation. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected...

7.2CVSS0.5AI score0.01605EPSS
SaveExploits0References10Affected Software2
Rows per page
Query Builder