GHSA-6wjw-qf87-fv5v

GHSA-6wjw-qf87-fv5v · Laravel Encrypter Failure to decryption vulnerability

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

A potential exploit of the Laravel Encrypter component that may cause the Encrypter to fail on decryption and unexpectedly return false. To exploit this, the attacker must be able to modify the encrypted payload before it is decrypted. Depending on the code within your application, this could lead to unexpected behavior when combined with weak type comparisons, for example: ```php <?php $decyptedValue = decrypt($secret); if ($decryptedValue == '') { // Code is run even though decrypted value is false... } ```

Corrección disponible

Publicación

2024-05-15T22:01:01Z

Actualización

2024-11-29T05:26:01.808252Z

Pila tecnológica: php

Comprueba tu servidor →