p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in barryvdh/laravel-translation-manager

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für barryvdh/laravel-translation-manager: 0. Davon im KEV-Katalog: 0.

RSS ↗ JSON ↗
Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 2

  1. CVE-2025-49130

    Mittel · CVSS 6EPSS 0,42%Korrektur verfügbar

    Laravel Translation Manager Vulnerable to Stored Cross-site Scripting

    Laravel Translation Manager is a package to manage Laravel translation files. Prior to version 0.6.8, the application is vulnerable to Cross-Site Scripting (XSS) attacks due to incorrect input validation and sanitization of user-input data. An attacker can inject arbitrary HTML code, including JavaScript scripts, into the page processed by the user's browser, allowing them to steal sensitive data, hijack user sessions, or conduct other malicious activities. Only authenticated users with access to the translation manager are impacted. The issue is fixed in version 0.6.8.

    barryvdh/laravel-translation-managerPHP
    • Auf 0.6.8 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

  2. GHSA-3fvf-2gp4-89wq

    Nicht bewertetKorrektur verfügbar

    Possibility for Denial of Service by overwriting PHP files with language exports

    ### Impact Laravel Translation Manager didn't check the locale name, which allowed directory traversal when exporting files. The content would be a PHP file returning an array of translations, but this could lead to unexpected results, like denial of service. Access to the Laravel Translation Manager is required, because a new locale would have to be added and published. ### Patches Version 0.6.2 fixes this issue. ### Workarounds Only allow trusted admins to publish/edit translations. ### References https://github.com/barryvdh/laravel-translation-manager/pull/417 ### For more information If you have any questions or comments about this ad

    barryvdh/laravel-translation-managerPHP
    • Auf 0.6.2 aktualisieren
    Veröffentlicht Aktualisiert
    Originalmeldung 1 ↗Originalmeldung 2 ↗Originalmeldung 3 ↗

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →