GHSA-c7rm-w2hj-x8g3
Suggest an improvement- Source
- https://github.com/advisories/GHSA-c7rm-w2hj-x8g3
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-c7rm-w2hj-x8g3/GHSA-c7rm-w2hj-x8g3.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-c7rm-w2hj-x8g3
- Aliases
- Published
- 2022-05-24T17:27:24Z
- Modified
- 2024-11-29T05:35:25.117126Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- Guard bypass in Eloquent models affecting Laravel illuminate database component
- Details
-
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment.
- Database specific
{ "github_reviewed": true, "github_reviewed_at": "2024-05-15T20:22:26Z", "nvd_published_at": "2020-09-04T02:15:00Z", "cwe_ids": [], "severity": "HIGH" }- References
Affected packages
Packagist / illuminate/database
Package
- Name
- illuminate/database
- Purl
- pkg:composer/illuminate/database
Packagist / illuminate/database
Package
- Name
- illuminate/database
- Purl
- pkg:composer/illuminate/database
Affected versions
v6.*
v6.0.0
v6.0.1
v6.0.2
v6.0.3
v6.0.4
v6.1.0
v6.2.0
v6.3.0
v6.4.1
v6.5.0
v6.5.1
v6.5.2
v6.6.0
v6.6.1
v6.6.2
v6.7.0
v6.8.0
v6.10.0
v6.11.0
v6.12.0
v6.13.0
v6.13.1
v6.14.0
v6.15.0
v6.15.1
v6.16.0
v6.17.0
v6.17.1
v6.18.0
v6.18.1
v6.18.2
v6.18.3
v6.18.4
v6.18.5
v6.18.6
v6.18.7
v6.18.8
v6.18.9
v6.18.10
v6.18.11
v6.18.12
v6.18.13
v6.18.14
v6.18.15
v6.18.16
v6.18.17
v6.18.18
v6.18.19
v6.18.20
v6.18.21
v6.18.22
v6.18.23
v6.18.24
v6.18.25
v6.18.26
v6.18.27
v6.18.28
v6.18.29
v6.18.30
v6.18.31
v6.18.32
v6.18.33
Packagist / illuminate/database
Package
- Name
- illuminate/database
- Purl
- pkg:composer/illuminate/database
Affected versions
v7.*
v7.0.0
v7.0.1
v7.0.2
v7.0.3
v7.0.4
v7.0.5
v7.0.6
v7.0.7
v7.0.8
v7.1.0
v7.1.1
v7.1.2
v7.1.3
v7.2.0
v7.2.1
v7.2.2
v7.3.0
v7.4.0
v7.5.0
v7.5.1
v7.5.2
v7.6.0
v7.6.1
v7.6.2
v7.7.0
v7.7.1
v7.8.0
v7.8.1
v7.9.0
v7.9.1
v7.9.2
v7.10.0
v7.10.1
v7.10.2
v7.10.3
v7.11.0
v7.12.0
v7.13.0
v7.14.0
v7.14.1
v7.15.0
v7.16.0
v7.16.1
v7.17.0
v7.17.1
v7.17.2
v7.18.0
v7.19.0
v7.19.1
v7.20.0
v7.21.0
v7.22.0
v7.22.1
v7.22.2
v7.22.3
v7.22.4
v7.23.0
v7.23.1