CVE-2020-24941 - An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0

Back Back to CVE browser

HIGH

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0

Published Sep 4, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.09%

Description

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-863

Incorrect Authorization

References (5)

https://blog.laravel.com/security-release-laravel-61835-7240
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1211
Advisory
https://github.com/advisories/GHSA-w68r-5p45-5rqp
Advisory
https://github.com/laravel/framework/commit/897d107775737a958dbd0b2f3ea37877c7526371
https://nvd.nist.gov/vuln/detail/CVE-2020-24941

Link	Providers	Tags
https://blog.laravel.com/security-release-laravel-61835-7240		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-1211		Advisory
https://github.com/advisories/GHSA-w68r-5p45-5rqp		Advisory
https://github.com/laravel/framework/commit/897d107775737a958dbd0b2f3ea37877c7526371
https://nvd.nist.gov/vuln/detail/CVE-2020-24941