← volver
CVE-2025-27515

Laravel has a File Validation Bypass

CVSS 6.9 MEDIUMEPSS 0.7%CWE-155
Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Productos afectados
laravel · framework

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →