BIT-laravel-2022-2870

vendorUSosv

laravel deserialization

view advisory published 2024-03-06Licence: per source

A vulnerability was found in laravel 5.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206501 was assigned to this vulnerability.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-2870US	critical9.8	0.83% (57th)	—	2022-08-17
A vulnerability was found in laravel 5.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to deserialization. The attack may be ini…

references

External citations — patches, advisories, analysis.

https://github.com/beicheng-maker/vulns/issues/2WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-2870WEB
https://vuldb.com/?id.206501WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan