CVE-2017-14775

4.3

MEDIUMCVSS v2

Published

September 28, 2017

Affected

6 projects

Assigned by

MITRE

Severity scale

010

Description

Laravel before 5.5.10 mishandles the remember_me token verification process because DatabaseUserProvider does not have constant-time token comparison.

laravel/laravel

PackagistThe skeleton application for the Laravel framework.

<= 5.5.9NVD

laravel/framework

PackagistThe Laravel Framework.

< 5.5.10OSV

laravel/framework

GitHub

More on this CVE

NVD↗GitHub Advisory↗

Laravel is a web application framework with expressive, elegant syntax.

< 5.5.10NVD

laravel

NPM

<= 5.5.9NVD

laravel

RubyGemsReadily build new web applications using Laravel framework for PHP.

<= 5.5.9NVD

nikhgupta/laravel

GitHubLaravel Gem - Readily build new web applications using Laravel framework for PHP

<= 5.5.9NVD

Security Advisories

CVE-2017-14775

Description

More on this CVE