Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
WS-2020-0052
Good to know:
Date: March 18, 2020
An XSS vulnerability found in laravel framework 7.x before 7.1.2.
Language: PHP
Severity Score
Severity Score
Weakness Type (CWE)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79Top Fix
Upgrade Version
Upgrade to version ybaruchel/laravel-filemanager - v7.1.2;laravel/framework - dev-dependabot/npm_and_yarn/src/Illuminate/Foundation/resources/exceptions/renderer/cross-spawn-7.0.6;laravel/framework - v7.1.2;turbo124/framework - v7.1.2;drakakisgeo/mailtester - v2.1.0;drakakisgeo/mailtester - v1.0.0;rekrios/laravel-framework - v7.1.2;ybaruchel/laravel-entity-generator - v7.1.2;larauel/framework - v7.0.4;larauel/framework - v7.1.2;respond.io/framework - v7.0.4;respond.io/framework - v7.0.6;ybaruchel/laravel-disable-lazyload - v7.1.2;ybaruchel/laravel-heap-cache - v7.1.2;helsingborg-stad/municipio - dev-wip/3.0/search-result-design-implemenetation;helsingborg-stad/municipio - dev-wip/3.0/nav-search;helsingborg-stad/municipio - dev-wip/image-upload;helsingborg-stad/municipio - dev-wip/archive-tags;illuminate/view - v7.1.2;compie/micropay - v7.1.2;autotim/laravel-framework - v7.1.2;descompilando/framework - v7.1.2;jairhumberto/laravel58-php8 - v7.1.2;hobsrkm/laravel-framework - v7.1.2;exarcheia/framework - v7.1.2;owenconti/framework - v7.1.2;cvsouth/framework - v7.1.2;satupersen/view - no_fix
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | NONE |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | LOW |
| Integrity (I): | LOW |
| Availability (A): | LOW |