PT-2018-18733 · Rap2Hpoutre · Laravel Log Viewer

Rap2Hpoutre · Publicado 2018-03-25 · Atualizado 2022-05-13 · CVE-2018-8947

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions rap2hpoutre Laravel Log Viewer versions prior to 0.13.0

Description The issue allows remote attackers to bypass intended access restrictions. This is because the software relies on Base64 encoding for certain requests, making it easier for attackers to exploit. For example, attackers can read arbitrary files via a 'dl' request.

Recommendations For versions prior to 0.13.0, update to version 0.13.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the 'dl' request to minimize the risk of exploitation.

Exploit

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-312

Identificadores relacionados

CVE-2018-8947

GHSA-63QJ-P8GH-5XXX

Produtos afetados

Laravel Log Viewer

Referências · 6

• 🔥 https://exploit-db.com/exploits/44343 · Exploit
• https://github.com/rap2hpoutre/laravel-log-viewer/releases/tag/v0.13.0 · Nota
• https://github.com/rap2hpoutre/laravel-log-viewer/commit/cda89c06dc5331d06fab863d7cb1c4047ad68357 · Correção
• https://osv.dev/vulnerability/CVE-2018-8947 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8947 · Nota de Segurança
• https://osv.dev/vulnerability/GHSA-63qj-p8gh-5xxx · Aviso do Fabricante