6.9Orta

CVE-2025-27515Laravel has a File Validation Bypass

laravel framework Yayım: 2025-03-05 21:45 (1 yıl önce)

Açıklama

Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.

Zayıflık türü (CWE): CWE-155

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
laravel	framework	>= 12.0.0, < 12.1.1, < 11.44.1

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (2)

cpe:2.3:a:laravel:framework:*:*:*:*:*:*:*:* < 11.44.1
cpe:2.3:a:laravel:framework:*:*:*:*:*:*:*:* ≥ 12.0.0 < 12.1.1

CVSS puanı

6.9Orta

Kaynak: GitHub_M · CVSS 4.0

Saldırı yolu: Ağ
Karmaşıklık: Düşük
Ön koşul: Yok
Gereken yetki: Yok
Kullanıcı etkileşimi: Gerekmez
Gizlilik: Düşük
Bütünlük: Düşük
Erişilebilirlik: Yok

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N

Tüm puanlar (3)

cna	CVSS 4.0	6.9Orta
security-advisories@github.com	CVSS 4.0	6.9Orta
nvd	CVSS 3.1	9.8Kritik

EPSS (30 günde istismar olasılığı)

0.75%

tüm CVE'lerin %55'inden yüksek

CISA değerlendirmesi (SSVC)

İstismar: none
Otomatikleştirilebilir: yes
Teknik etki: partial

Zaman çizelgesi

Numara ayrıldı2025-02-26
Yayımlandı2025-03-05 21:45
IP-DB'ye ulaştı2026-10-25 00:00
Son güncelleme2026-06-17 12:03

Numarayı veren (CNA): GitHub_M
NVD durumu: Analyzed

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Laravel

9.2Kritik

CVE-2026-114509 21 gün önce

Laravel TokenGuard authentication bypass through non-string API credentials

laravel framework

Laravel is a web application framework. Prior to 12.68.0 and 13.29.0, TokenGuard configured as a standard token-based API guard does not reject a crafted non-string credential. Under affected MySQL or MariaDB configurations, the authentication lookup can matc…

1.8%EPSS

6.5Orta

CVE-2026-114508 21 gün önce

Laravel relationship inclusion can trigger unauthorized data destruction

laravel framework

Laravel is a web application framework. From 12.45.0 until 12.68.0 and 13.27.0, crafted relationship inclusion on a read-only endpoint can trigger a destructive database operation on a related table instead of retrieving data. A user with read access but no w…

3.1Düşük

CVE-2026-102279 1 ay önce

Laravel: XSS in Debug Page Information

laravel framework

Laravel is a web application framework. Prior to 12.69.0 and 13.30.0, Laravel exception debug pages with APP_DEBUG=true pass attacker-controlled input to a Tippy.js tooltip configured with allowHTML true, enabling DOM-based cross-site scripting when a user ho…

8.9Yüksek

CVE-2026-48019 2 ay önce

CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay

laravel framework

Laravel is a web application framework. Prior to versions 12.60.0 and 13.10.0, a CRLF injection vulnerability in Laravel's email validation, in combination with how Symfony Mailer and Symfony Mime handle certain character sequences, may allow an unauthenticat…

6.5Orta

CVE-2020-36950 9 ay önce

Laravel Nova 3.7.0 - 'range' DoS

Laravel Holdings Inc. Laravel Nova

Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter. Attackers can send simultaneous requests with an extremely high range value to overwhelm and crash th…

8.4Yüksek

CVE-2021-47756 10 ay önce

Laravel Valet 2.0.3 - Local Privilege Escalation (macOS)

Laravel Laravel Valet

Laravel Valet versions 1.1.4 to 2.0.3 contain a local privilege escalation vulnerability that allows users to modify the valet command with root privileges. Attackers can edit the symlinked valet command to execute arbitrary code with root permissions without…