Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-24940
7.5
HIGHCVSS v3
Published
September 4, 2020
CVSS v2
4.3 MEDIUM
Affected
5 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
laravel/laravel
PackagistThe skeleton application for the Laravel framework.
PackagistThe skeleton application for the Laravel framework.>= 7.0.0, < 7.23.2, < 6.18.34NVD
illuminate/databasePackagistThe Illuminate Database package.
PackagistThe Illuminate Database package.>= 5.5.0, <= 5.5.44, >= 6.0.0, < 6.18.34, >= 7.0.0, < 7.23.2OSV
NPM
RubyGems
GitHub