PT-2022-20312 · Laravel+1 · Laravel+1

Published 2022-05-16 · Updated 2022-08-12 · CVE-2022-30779

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Laravel version 9.1.8

Description The issue allows Remote Code Execution via an unserialize pop chain in the destruct method of GuzzleHttpCookieFileCookieJar.php when processing attacker-controlled data for deserialization.

Recommendations For Laravel version 9.1.8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2022-30779

Affected Products

Guzzlehttpcookiefilecookiejar.Php

Laravel

References · 4

• 🔥 https://github.com/1nhann/vulns/issues/2 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-30779 · Security Note
• https://t.me/cvenotify/30263 · Telegram Post
• https://t.me/cibsecurity/42711 · Telegram Post