PT-2023-13792 · Laravel · Laravel

Jens Ji · Published 2023-04-25 · Updated 2025-02-03 · CVE-2022-40482

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Laravel versions 8.x through 9.x before 9.32.0

Description The authentication method was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing. This issue is caused by the early return inside the hasValidCredentials method in the IlluminateAuthSessionGuard class when a user is found to not exist.

Recommendations For Laravel versions 8.x through 9.x before 9.32.0, update to version 9.32.0 or later to resolve the issue. As a temporary workaround, consider modifying the hasValidCredentials method in the IlluminateAuthSessionGuard class to prevent early returns that could reveal user existence.

Exploit

Fix

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2022-40482

Affected Products

Laravel

References · 7

• 🔥 https://github.com/ephort/laravel-user-enumeration-demo · Exploit
• 🔥 https://ephort.dk/blog/laravel-timing-attack-vulnerability · Exploit
• https://github.com/laravel/framework/pull/44069 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-40482 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40482 · Security Note
• https://github.com/laravel/framework/releases/tag/v9.32.0 · Note
• https://t.me/cvenotify/109762 · Telegram Post