Severity
- CVSS 3.x
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected versions
Repository
| Affected commits | Fixed by commit |
|---|---|
| GIT github.com/laravel/framework ↗ | |
| All commits before 7a74817c91be61676deafe3a84a758a71350d9f2 | 7a74817c91be61676deafe3a84a758a71350d9f2 |
| 0b12ef19623c40e22eff91a4b48cb13b3b415b25 to before 75792f4c6945749046d4ec1ce560b04640d36b99 | 75792f4c6945749046d4ec1ce560b04640d36b99 |
Also listed as affected (128)
| |
Description
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.