Description (CNA)
Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| laravel / framework | affected >= 12.0.0, < 12.1.1; affected < 11.44.1 |
CWE
CWE-155
References
- https://github.com/laravel/framework/security/advisories/GHSA-78fx-h6xr-vch4
- https://github.com/laravel/framework/commit/2d133034fefddfb047838f4caca3687a3ba811a5
ADP enrichment
No English description supplied.
No references supplied.