PT-2021-23949 · Laravel · Laravel

Chinpei215 · Published 2021-12-07 · Updated 2022-08-09 · CVE-2021-43808

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Laravel versions prior to 8.75.0, 7.30.6, and 6.20.42

Description: The issue is related to a possible cross-site scripting (XSS) vulnerability in the Blade templating engine. This vulnerability can be exposed if the parent template contains an exploitable HTML structure and the user is able to guess the parent placeholder SHA-1 hash by trying common names of sections. As a result, a broken HTML element may be clicked, and the user taken to another location in their browser due to XSS.

Recommendations: For versions prior to 8.75.0, update to version 8.75.0 or later. For versions prior to 7.30.6, update to version 7.30.6 or later. For versions prior to 6.20.42, update to version 6.20.42 or later.

Exploit

Fix

XSS

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-79

CWE-327

Related Identifiers

CVE-2021-43808

GHSA-66HF-2P6W-JQFW

Affected Products

Laravel

References · 19

• 🔥 https://github.com/laravel/framework/security/advisories/GHSA-66hf-2p6w-jqfw · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2021-43808.yaml · Exploit
• 🔥 https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/view/CVE-2021-43808.yaml · Exploit
• https://github.com/laravel/framework/commit/b8174169b1807f36de1837751599e2828ceddb9b · Patch
• https://github.com/laravel/framework/pull/39908 · Patch
• https://github.com/laravel/framework/pull/39906 · Patch
• https://github.com/laravel/framework/pull/39909 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-43808 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43808 · Security Note
• https://osv.dev/vulnerability/GHSA-66hf-2p6w-jqfw · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-43808 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-43808 · Vendor Advisory
• https://github.com/laravel/framework/releases/tag/v8.75.0 · Note
• https://github.com/laravel/framework/releases/tag/v6.20.42 · Note
• https://github.com/laravel/framework/releases/tag/v7.30.6 · Note