Yüksek CISA KEV
CVE-2018-15133: Laravel Laravel Framework: aktif olarak istismar edilen açık
Açıklama (NVD)
Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).
Özet bilgiler
- EPSS
- %76,57 (yüzdelik 100)
- Yama
- Yok / bilinmiyor
- KEV
- Eklenme: 2024-01-16 · Son tarih: 2024-02-06
Gerekli aksiyon: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.