BIT-laravel-2022-2886

vendorUSosv

Laravel deserialization

view advisory published 2024-03-06Licence: per source

A vulnerability, which was classified as critical, was found in Laravel 5.1. Affected is an unknown function. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-206688.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2022-2886US	high8.8	0.71% (53rd)	—	2022-08-19
A vulnerability, which was classified as critical, was found in Laravel 5.1. Affected is an unknown function. The manipulation leads to deserialization. It is possible to launch th…

references

External citations — patches, advisories, analysis.

https://github.com/beicheng-maker/vulns/issues/3WEB
https://nvd.nist.gov/vuln/detail/CVE-2022-2886WEB
https://vuldb.com/?id.206688WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan