CVE-2020-24941

7.5

HIGHCVSS v3

Published

September 4, 2020

CVSS v2

4.3 MEDIUM

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.

laravel/laravel

PackagistThe skeleton application for the Laravel framework.

>= 7.0.0, < 7.24.0, < 6.18.35NVD

laravel/framework

PackagistThe Laravel Framework.

< 6.18.35, >= 7.0.0, < 7.24.0OSV

laravel

NPM

More on this CVE

NVD↗GitHub Advisory↗

>= 7.0.0, < 7.24.0, < 6.18.35NVD

laravel

RubyGemsReadily build new web applications using Laravel framework for PHP.

>= 7.0.0, < 7.24.0, < 6.18.35NVD

nikhgupta/laravel

GitHubLaravel Gem - Readily build new web applications using Laravel framework for PHP

>= 7.0.0, < 7.24.0, < 6.18.35NVD

Security Advisories

CVE-2020-24941

Description

More on this CVE