← voltar
CVE-2025-27515

Laravel has a File Validation Bypass

CVSS 6.9 MEDIUMEPSS 0.7%CWE-155
Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
Produtos afetados
laravel · framework

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →