PT-2024-40017 · Laravel · Laravel

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Laravel (affected versions not specified)

Description The issue is related to a Cross-site Scripting vulnerability in the blade templating of Laravel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

GHSA-297G-XG4H-7W4C

Affected Products

Laravel

References · 5

• https://osv.dev/vulnerability/GHSA-297g-xg4h-7w4c · Vendor Advisory
• https://github.com/laravel/framework/pull/31945 · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/view/2020-03-13-1.yaml · Note
• https://github.com/illuminate/view · Note
• https://blog.laravel.com/security-laravel-712-released · Note