Lucene search
Veracode Vulnerability DatabaseVERACODE:5463HistoryNov 20, 2017 - 9:08 a.m.
Information Disclosure
2017-11-2009:08:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
0.116 Low
EPSS
Percentile
95.3%
laravel/framework is vulnerable to information disclosure attacks. The writeNewEnvironmentFileWith method does not restrict /.env permissions, allowing a malicious user to obtain sensitive information by sending a direct request to the /.env URI.
| CPE | Name | Operator | Version |
|---|---|---|---|
| laravel/framework | le | 5.5.x-dev | |
| laravel/framework | le | 5.5.x-dev |
Related
cvelist
cvelist
CVE-2017-16894
2017-11-20 01:00:00
cve
cve
CVE-2017-16894
2017-11-20 01:29:00
debiancve
debiancve
CVE-2017-16894
2017-11-20 01:29:00
nuclei
nuclei
Laravel <5.5.21 - Information Disclosure
2023-04-13 05:38:32
osv
osv
CVE-2017-16894
2017-11-20 01:29:00
nvd
nvd
CVE-2017-16894
2017-11-20 01:29:00
prion
prion
Code injection
2017-11-20 01:29:00
attackerkb
attackerkb
Laravel Framework Unserialize Token RCE (CVE-2018-15133)
2018-08-09 00:00:00
zdt
zdt
PHP Laravel Framework Token Unserialize Remote Command Execution Exploit
2019-07-15 00:00:00
packetstorm
packetstorm
PHP Laravel Framework Token Unserialize Remote Command Execution
2019-07-15 00:00:00
metasploit
metasploit
PHP Laravel Framework token Unserialize Remote Command Execution
2019-07-07 14:50:13
exploitdb
exploitdb