CVE-2017-9303Media · CVSS 6.1EPSS 0,96%Corrección disponibleCVE-2017-9303Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host.laravel/laravelPHPActualiza a 5.4.22Publicación 29 de mayo de 2017Actualización 5 de agosto de 2024Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗