CVE-2022-2870 - laravel deserialization

Back Back to CVE browser

CRITICAL

laravel deserialization

Published Aug 17, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.81%

Description

A vulnerability was found in laravel 5.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206501 was assigned to this vulnerability.

Affected products

Vendor n/a Product Laravel Default
n/a
- Version
  5.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Laravel

n/a

Version	Status	Constraints
5.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35104
Advisory
https://github.com/beicheng-maker/vulns/issues/2
x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.206501
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-35104		Advisory
https://github.com/beicheng-maker/vulns/issues/2		x_refsource_MISCExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.206501		x_refsource_MISCThird Party Advisory