Description (CNA)
Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter. Attackers can send simultaneous requests with an extremely high range value to overwhelm and crash the server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Laravel Holdings Inc. / Laravel Nova | affected 3.7.0 |
CWE
CWE-770
References
- https://www.exploit-db.com/exploits/49198
- https://nova.laravel.com/
- https://nova.laravel.com/releases
- https://www.vulncheck.com/advisories/laravel-nova-range-dos
ADP enrichment
No English description supplied.
No references supplied.