Threat intelligence / Vulnerability
CVE-2018-15133
Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).
Vulnerability
TypeVulnerability
External ID—
First seen2024-01-16
Last seen2024-01-16
Confidence
—
Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).
Labels
CISA KEV context
Vendor / productLaravel Laravel Framework
Added2024-01-16
Due date2024-02-06
2 recorded
Relationships
2 external