An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
{ "cpes": [ "cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*" ], "severity": "High" }