LA
Product
Laravel
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 5Medium 3Low 0
Watch
Add Laravel to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-9303 | 6.1 | May 29 | Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by… Affected: 5.4.0 |
| CVE-2017-14775 | 5.9 | Sep 28 | Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison Affected: through 5.5.9 |
| CVE-2021-21263 | 5.3 | Jan 19 | Laravel is a web application framework Affected: 6.0.0 before 6.20.11; 7.0.0 before 7.30.2; 8.0.0 before 8.22.1 |
Showing 3