CVE-2021-28254

9.8

CRITICALCVSS v3

Published

April 19, 2023

Affected

5 projects

Assigned by

MITRE

Severity scale

010

Description

A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.

PackagistThe skeleton application for the Laravel framework.

= 8.5.9NVD

Crates.ioLaravel Zero Downtime

= 8.5.9NVD

NPM

= 8.5.9NVD

RubyGemsReadily build new web applications using Laravel framework for PHP.

= 8.5.9NVD

GitHubLaravel Gem - Readily build new web applications using Laravel framework for PHP

= 8.5.9NVD