CVE-2023-24065
Published:January 29, 2023
Updated:September 21, 2026
NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billing user) can have a JavaScript payload that is executed upon visiting the /users/2/1 page. This may allow attackers to steal Protected Health Information because the product is for health charting.
Affected Packages
morenorafael/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0rubenarakelyan/zomato-api-php (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0michalwolinski/wbiztool-laravel (PHP):
Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/composer/symfony/http-foundation-4.4.7Fix Suggestion:
Update to version dev-dependabot/composer/symfony/http-foundation-4.4.7bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-guzzle-alias <dev-handle-oomsFix Suggestion:
Update to version dev-handle-oomsgeorge/laraadmin (PHP):
Affected version(s) >=1.0.2 <1.0.9Fix Suggestion:
Update to version 1.0.9bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-new-shutdown-strategy <dev-redacted-keysFix Suggestion:
Update to version dev-redacted-keysaquaswim/laravel-with-voyager (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0crowdtruth/crowdtruth (PHP):
Affected version(s) =dev-laravel <dev-lukaszFix Suggestion:
Update to version dev-lukaszbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-auto-on-session-tracking <dev-discard-classesFix Suggestion:
Update to version dev-discard-classesdigbang/laravel-project (PHP):
Affected version(s) =5.2.x-dev <5.3.0Fix Suggestion:
Update to version 5.3.0dwij/laraadmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9nencerpackagist/asgardcms (PHP):
Affected version(s) =2.0Fix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) =dev-lighthouse-integration <dev-limit-query-sourceFix Suggestion:
Update to version dev-limit-query-sourcelarashop/larashop (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) >=0.x-dev <0.4.0Fix Suggestion:
Update to version 0.4.0coloredcow/laravel-ccda (PHP):
Affected version(s) =dev-testFix Suggestion:
Update to version no_fixitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.4.x <0.4.1Fix Suggestion:
Update to version 0.4.1trungtnm/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devcroudtech/sentry-laravel (PHP):
Affected version(s) >=dev-master <=1.7.3Fix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) >=1.9.0 <2.2.0Fix Suggestion:
Update to version 2.2.0rsands2801/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.6.x <0.6.1Fix Suggestion:
Update to version 0.6.1laravel/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devgoogleads/googleads-php-lib (PHP):
Affected version(s) =38.0.0 <39.0.0Fix Suggestion:
Update to version 39.0.0phpsandbox/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devlaravel/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0sentry/sentry-laravel (PHP):
Affected version(s) =0.8.1 <0.8.2Fix Suggestion:
Update to version 0.8.2sentry/sentry-laravel (PHP):
Affected version(s) =dev-queue-tracing-integration <dev-readme-contributing-doc-improvementsFix Suggestion:
Update to version dev-readme-contributing-doc-improvementsbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.4.0 <v2.7.0Fix Suggestion:
Update to version v2.7.0rsands2801/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.5.x <0.6.0Fix Suggestion:
Update to version 0.6.0healthengine/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0googleads/googleads-php-lib (PHP):
Affected version(s) >=41.0.0 <46.1.0Fix Suggestion:
Update to version 46.1.0myckhel/laravel-example-template (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devasgardcms/platform (PHP):
Affected version(s) >=2.0.0 <dev-dependabot/npm_and_yarn/Themes/Flatly/debug-and-browser-sync-and-compression-and-express-and-serve-index-2.6.9Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/Themes/Flatly/debug-and-browser-sync-and-compression-and-express-and-serve-index-2.6.9codex/codex (PHP):
Affected version(s) =dev-master <1.0.0Fix Suggestion:
Update to version 1.0.0googleads/googleads-php-lib (PHP):
Affected version(s) =dev-update-php-72Fix Suggestion:
Update to version no_fixbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-laravel-vapor <dev-maze-runner-tidyFix Suggestion:
Update to version dev-maze-runner-tidyrubenarakelyan/laravel-session-files-to-redis (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devdanieltorscho/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0sentry/sentry-laravel (PHP):
Affected version(s) >=1.6.0 <1.7.1Fix Suggestion:
Update to version 1.7.1bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-laravel-10-test-fixture <dev-laravel-11-contextFix Suggestion:
Update to version dev-laravel-11-contextbkwld/decoy (PHP):
Affected version(s) =5.3.0 <5.3.1Fix Suggestion:
Update to version 5.3.1itsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-laravel-4-x <10Fix Suggestion:
Update to version 10bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.9.0 <v2.11.1Fix Suggestion:
Update to version v2.11.1sonarsoftware/customer_portal (PHP):
Affected version(s) >=1.0.0 <1.0.25Fix Suggestion:
Update to version 1.0.25sentry/sentry-laravel (PHP):
Affected version(s) =1.2.0 <1.2.1Fix Suggestion:
Update to version 1.2.1jjsoft-ar/platform (PHP):
Affected version(s) =2.0.x-devFix Suggestion:
Update to version no_fixnosh2/nosh2 (PHP):
Affected version(s) >=dev-dependabot/composer/guzzlehttp/guzzle-7.4.4 <=dev-dependabot/composer/laravel/framework-8.40.0Fix Suggestion:
Update to version no_fixgear/laravel-starter (PHP):
Affected version(s) =1.0.4Fix Suggestion:
Update to version no_fixricadesign/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =dev-cleanup-tracing-event-handler <dev-codecovFix Suggestion:
Update to version dev-codecovnp21/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devmshule/laravel-pipes (PHP):
Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <v1.2Fix Suggestion:
Update to version v1.2wbswjc/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0morenorafael/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devchrsm/prayerletters (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =dev-feature/read-context-from-exception <dev-feature/redis-cache-hit-missFix Suggestion:
Update to version dev-feature/redis-cache-hit-misswiddy/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-templates-update-20250124-172756 <dev-xFix Suggestion:
Update to version dev-xyozh/test-newsblog (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0tahaghafuri/laravel-fix (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0asgardcms/platform (PHP):
Affected version(s) >=3.0.0 <dev-dependabot/npm_and_yarn/Themes/Adminlte/bootstrap-3.4.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/Themes/Adminlte/bootstrap-3.4.1ymonkey/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) >=1.4.0 <1.5.0Fix Suggestion:
Update to version 1.5.0conversoft/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.17.0 <v2.20.1Fix Suggestion:
Update to version v2.20.1sentry/sentry-laravel (PHP):
Affected version(s) =dev-feature/user-ip-from-request <dev-first-class-callableFix Suggestion:
Update to version dev-first-class-callableitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.7.x <0.8.0Fix Suggestion:
Update to version 0.8.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-add-logger-context-as-extra-context <dev-add-more-user-context-attributesFix Suggestion:
Update to version dev-add-more-user-context-attributesshridharkaushik29/laravel-angular (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0aquaswim/laravel-with-voyager (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devfurkankadioglu/modvelbase (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixtrungtnm/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0jayywalker/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0macromindonline/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.4.x <0.4.1Fix Suggestion:
Update to version 0.4.1googleads/googleads-php-lib (PHP):
Affected version(s) =37.0.0 <37.1.0Fix Suggestion:
Update to version 37.1.0laravelfy/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0opengis/laravel-geoserver (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0rsands2801/sentry-laravel (PHP):
Affected version(s) >=dev-master <0.4.0Fix Suggestion:
Update to version 0.4.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-propose-span-helper <dev-queue-improvementsFix Suggestion:
Update to version dev-queue-improvementsshopex/luban-desktop (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devbowero/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsonarsoftware/customer_portal (PHP):
Affected version(s) =dev-clear-cache <dev-masterFix Suggestion:
Update to version dev-mastersentry/sentry-laravel (PHP):
Affected version(s) =dev-3.x-changelog <dev-3.x-tmpFix Suggestion:
Update to version dev-3.x-tmpshopex/luban-desktop (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) =v2.2.0 <v2.3.0Fix Suggestion:
Update to version v2.3.0congraph/cms (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0wuhaohui/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devbugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-kattrali/laravel56-upgrading <dev-laravel56-queue-testsFix Suggestion:
Update to version dev-laravel56-queue-testsbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-feature-flags <dev-fix-crash-when-sessions-disabledFix Suggestion:
Update to version dev-fix-crash-when-sessions-disabledchrsc/laraadmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9jefhar/laravel-domain-oriented (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0staufenbiel/laravel (PHP):
Affected version(s) >=dev-master <=v0.1.12Fix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) =2.12.0 <dev-release/2.12.0Fix Suggestion:
Update to version dev-release/2.12.0sergeyugai/badpack (PHP):
Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/composer/symfony/http-kernel-5.4.20Fix Suggestion:
Update to version dev-dependabot/composer/symfony/http-kernel-5.4.20sentry/sentry-laravel (PHP):
Affected version(s) >=1.0.0-beta2 <1.0.0-beta5Fix Suggestion:
Update to version 1.0.0-beta5macromindonline/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.6.x <0.6.1Fix Suggestion:
Update to version 0.6.1ricadesign/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0sentry/sentry-laravel (PHP):
Affected version(s) =0.6.1 <0.6.2Fix Suggestion:
Update to version 0.6.2laravelista/kyle (PHP):
Affected version(s) =0.1.0 <0.2.0Fix Suggestion:
Update to version 0.2.0myckhel/laravel-example-template (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0ziperrom1/laravel-boilerplate (PHP):
Affected version(s) >=dev-dev <=v1.0.1-npm-publishFix Suggestion:
Update to version no_fixrubenarakelyan/laravel-session-files-to-redis (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0googleads/googleads-php-lib (PHP):
Affected version(s) =dev-update-symfony-serializer <dev-PierrickVoulet-patch-1Fix Suggestion:
Update to version dev-PierrickVoulet-patch-1widdy/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devyozh/test-newsblog (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devdrnkwati/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0livecms/livecms (PHP):
Affected version(s) >=v0.x-dev <v1.0.1Fix Suggestion:
Update to version v1.0.1polly3d/laravel-kit (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.14.0 <v2.15.0-alpha-1Fix Suggestion:
Update to version v2.15.0-alpha-1brnbio/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-master <0.1.0Fix Suggestion:
Update to version 0.1.0sentry/sentry-laravel (PHP):
Affected version(s) =1.x-dev <dev-kamilogorek-patch-1Fix Suggestion:
Update to version dev-kamilogorek-patch-1macromindonline/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.7.x <0.8.0Fix Suggestion:
Update to version 0.8.0alexkb/laravel-docker (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bowero/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0phpsandbox/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0codicastudio/sentry-laravel (PHP):
Affected version(s) >=0.1.0 <=1.8.0Fix Suggestion:
Update to version no_fixitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.5.x <0.6.0Fix Suggestion:
Update to version 0.6.0dotsyntax/scaffolding (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) >=dev-release/2.7.0 <2.9.0Fix Suggestion:
Update to version 2.9.0itsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.9.x <0.9.1Fix Suggestion:
Update to version 0.9.1nbaskoff/beetlecms (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0saritasa/opbeat-laravel (PHP):
Affected version(s) =dev-master <0.1.0Fix Suggestion:
Update to version 0.1.0aasisvinayak/shop (PHP):
Affected version(s) =dev-dev <dev-masterFix Suggestion:
Update to version dev-masterbugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-PLAT-13640-crumb <dev-PLAT-13642-laravel12Fix Suggestion:
Update to version dev-PLAT-13642-laravel12jungle-gecko/sitarium (PHP):
Affected version(s) =v1.0.0 <v1.1.0Fix Suggestion:
Update to version v1.1.0drnkwati/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.8.x <0.9.0Fix Suggestion:
Update to version 0.9.0imaginacms/platform (PHP):
Affected version(s) >=2.0 <dev-imaginacms8.xFix Suggestion:
Update to version dev-imaginacms8.xsentry/sentry-laravel (PHP):
Affected version(s) =0.10.0 <0.10.1Fix Suggestion:
Update to version 0.10.1evgenbel/platform (PHP):
Affected version(s) >=2.0.0 <2.0.1Fix Suggestion:
Update to version 2.0.1bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-fix-unit-tests <dev-fix-unstable-testsFix Suggestion:
Update to version dev-fix-unstable-testsmacromindonline/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.5.x <0.6.0Fix Suggestion:
Update to version 0.6.0sentry/sentry-laravel (PHP):
Affected version(s) >=dev-feature/fix-empty-transaction-context <dev-feature/github-actions-migrationFix Suggestion:
Update to version dev-feature/github-actions-migrationcvepdb/cms (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0macromindonline/sentry-laravel (PHP):
Affected version(s) >=dev-master <0.4.0Fix Suggestion:
Update to version 0.4.0deadem/djem (PHP):
Affected version(s) >=dev-master <=dev-vuetifyFix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) >=dev-release/2.9.0 <dev-release/2.10.0Fix Suggestion:
Update to version dev-release/2.10.0burgess1109/file_transfer (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixopengis/laravel-geoserver (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devdamnyan/laravel-with-useracl (PHP):
Affected version(s) =v1.0Fix Suggestion:
Update to version no_fixlromanzini/laravel (PHP):
Affected version(s) >=dev-master <5.0.x-devFix Suggestion:
Update to version 5.0.x-devimaginacms/platform (PHP):
Affected version(s) =dev-pinturas-update <dev-upstream-masterFix Suggestion:
Update to version dev-upstream-masterfolklore/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devprwlr/laravue (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =dev-fix-command-input-handling <dev-fix-consuming-body-streamFix Suggestion:
Update to version dev-fix-consuming-body-streamnp21/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0asgardcms/platform (PHP):
Affected version(s) =test <dev-dependabot/npm_and_yarn/Themes/Adminlte/axios-0.21.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/Themes/Adminlte/axios-0.21.1sentry/sentry-laravel (PHP):
Affected version(s) =dev-byk/ref/modern-craft-config <dev-cache-eventsFix Suggestion:
Update to version dev-cache-eventsmiljan9602/bugsnag-laravel (PHP):
Affected version(s) >=dev-auto-on-session-tracking <v1.0.0Fix Suggestion:
Update to version v1.0.0prwlr/laravue (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0andreadatri/maboro (PHP):
Affected version(s) =dev-devFix Suggestion:
Update to version no_fixasgardcms/platform (PHP):
Affected version(s) >=3.5.0 <dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10ymonkey/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0jefhar/laravel-domain-oriented (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devcsgt/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0autotim/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-release/v2.23.0 <dev-release/v2.25.1Fix Suggestion:
Update to version dev-release/v2.25.1inoplate/inoplate (PHP):
Affected version(s) >=dev-develop <=v0.1.1Fix Suggestion:
Update to version no_fixbugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-laravel-8-maze-runner-fixture <dev-laravel8-queue-testsFix Suggestion:
Update to version dev-laravel8-queue-testsdarekmeco/platform (PHP):
Affected version(s) >=dev-master <1.0.0Fix Suggestion:
Update to version 1.0.0sanin/lara (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixc57fr/l5 (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0folklore/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0swisnl/game-of-tests-laravel-demo (PHP):
Affected version(s) >=1.0.0 <dev-dependabot/npm_and_yarn/path-parse-1.0.7Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/path-parse-1.0.7taerp/finance (PHP):
Affected version(s) =1.0.0.x-devFix Suggestion:
Update to version no_fixbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-fix/fixture-memory <dev-fixture-cleanupFix Suggestion:
Update to version dev-fixture-cleanupbugsnag/bugsnag-laravel (PHP):
Affected version(s) =v2.12.0 <v2.13.0Fix Suggestion:
Update to version v2.13.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-feature/laravel-octane-support <dev-feature/normalize-queue-nameFix Suggestion:
Update to version dev-feature/normalize-queue-nameimagina/cms-platform (PHP):
Affected version(s) =dev-pinturas-update <dev-upstream-masterFix Suggestion:
Update to version dev-upstream-masterlv2technologies/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0codicastudio/sentry (PHP):
Affected version(s) =1.0.0Fix Suggestion:
Update to version no_fixdentro/nge.noob (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-reinstate-unstable-tests <dev-temp/testFix Suggestion:
Update to version dev-temp/testmmockelyn/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0musoftware/logger-laravel (PHP):
Affected version(s) >=0.1.0 <3.0.0Fix Suggestion:
Update to version 3.0.0vinkas/auth (PHP):
Affected version(s) =dev-laravel <dev-masterFix Suggestion:
Update to version dev-masternbrabant/laraadmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9sentry/sentry-laravel (PHP):
Affected version(s) =dev-test <dev-test-commandFix Suggestion:
Update to version dev-test-commandbonsai/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =0.11.0 <1.0.0-beta1Fix Suggestion:
Update to version 1.0.0-beta1sentry/sentry-laravel (PHP):
Affected version(s) =2.10.1 <dev-release/2.10.1Fix Suggestion:
Update to version dev-release/2.10.1thelegacy/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.7.1 <v2.8.0Fix Suggestion:
Update to version v2.8.0neomerx/limoncello-collins (PHP):
Affected version(s) =dev-master <v3.0.0-beta-2Fix Suggestion:
Update to version v3.0.0-beta-2aerni/translator (PHP):
Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/npm_and_yarn/minimist-1.2.6Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/minimist-1.2.6sentry/sentry-laravel (PHP):
Affected version(s) =dev-feature/add-sql-origin-to-query-tracing-span <dev-feature/contextFix Suggestion:
Update to version dev-feature/contextsentry/sentry-laravel (PHP):
Affected version(s) =1.0.1 <1.0.2Fix Suggestion:
Update to version 1.0.2rsands2801/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.4.x <0.4.1Fix Suggestion:
Update to version 0.4.1hakoncms/hakoncms (PHP):
Affected version(s) =dev-devFix Suggestion:
Update to version no_fixitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.6.x <0.6.1Fix Suggestion:
Update to version 0.6.1autotim/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devalexkb/laravel-docker (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devnirmit/laraadmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9darekmeco/platform (PHP):
Affected version(s) >=2.0.0 <=3.2.1Fix Suggestion:
Update to version no_fixgab88slash/laravel-extended-stub (PHP):
Affected version(s) >=v5.2.23 <=v5.2.31.1Fix Suggestion:
Update to version no_fixzaxx44a/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsonarsoftware/customer_portal (PHP):
Affected version(s) =0.0.1 <dev-dependabot/npm_and_yarn/portal/axios-0.19.0Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/portal/axios-0.19.0auto-site-generator/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0brnbio/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0zaxx44a/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.0.0 <v2.1.0Fix Suggestion:
Update to version v2.1.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-kattrali/maze-docker-install-from-dist <dev-laravel-9/testbenchFix Suggestion:
Update to version dev-laravel-9/testbenchbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.15.0 <v2.16.0Fix Suggestion:
Update to version v2.16.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-master <dev-mdtro/add-dependency-reviewFix Suggestion:
Update to version dev-mdtro/add-dependency-reviewimagina/cms-platform (PHP):
Affected version(s) >=2.0 <dev-imaginacms8.xFix Suggestion:
Update to version dev-imaginacms8.xtjventurini/laravel-blueprint (PHP):
Affected version(s) =5.2.x-dev <5.3.x-devFix Suggestion:
Update to version 5.3.x-devrubenarakelyan/zomato-api-php (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devdanielstonies/sentry-laravel (PHP):
Affected version(s) >=dev-feature/prevent-duplicates <0.1.0Fix Suggestion:
Update to version 0.1.0nosh2/nosh2 (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/loader-utils-and-resolve-url-loader-1.4.2 <dev-dependabot/composer/guzzlehttp/guzzle-7.4.3Fix Suggestion:
Update to version dev-dependabot/composer/guzzlehttp/guzzle-7.4.3laraeast/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0dentro/nge.noob (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devchrsm/prayerletters (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0milhouse1337/laravel (PHP):
Affected version(s) =v5.2.23 <v5.2.24Fix Suggestion:
Update to version v5.2.24wuhaohui/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0l7wahn/ladmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9burgess1109/file_package (PHP):
Affected version(s) >=dev-master <=1.0.0Fix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) =dev-release/2.14.1 <2.14.2Fix Suggestion:
Update to version 2.14.2Related Resources (5)
Do you need more information?
Contact UsCVSS v4
Base Score:
5.1
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
PASSIVE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
LOW
Vulnerable System Availability
NONE
Subsequent System Confidentiality
LOW
Subsequent System Integrity
LOW
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Weakness Type (CWE)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS
Base Score:
0.57