4 matches found
CVE-2024-52301
The Laravel web application framework is vulnerable to an environment manipulation flaw when the register_argc_argv PHP directive is enabled. An attacker can provide a specially crafted query string in a URL to inject arguments, allowing them to change the environment used by the framework during...
CVE-2025-27515
CVE-2025-27515 affects Laravel: wildcard file/image validation (files.*) can bypass rules during upload. Root cause is improper handling of array-based uploads, enabling a user-controlled bypass. Fixed in Laravel releases 11.44.1 and 12.1.1. A PoC exploiting a wildcard validation bypass exists in...
CVE-2020-19316
The CVE-2020-19316 entry describes an OS command injection in Laravel Framework’s Filesystem.php, specifically in the link() function, affecting versions before 5.8.17. Evidence from multiple sources confirms the vulnerability affects Laravel’s file linking logic, enabling an attacker to inject a...