CVE-2020-24940
- Source
- https://cve.org/CVERecord?id=CVE-2020-24940
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-24940.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2020-24940
- Aliases
- Published
- 2020-09-04T02:15:10.723Z
- Modified
- 2026-02-11T14:25:36.334372Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
- Summary
- [none]
- Details
-
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
- References
Affected packages
Git / github.com/laravel/framework
Affected ranges
- Type
- GIT
- Repo
- https://github.com/laravel/framework
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixed
Affected versions
v6.*
v6.18.1
v6.18.10
v6.18.11
v6.18.12
v6.18.13
v6.18.14
v6.18.15
v6.18.16
v6.18.17
v6.18.18
v6.18.19
v6.18.2
v6.18.20
v6.18.21
v6.18.22
v6.18.23
v6.18.24
v6.18.25
v6.18.26
v6.18.27
v6.18.28
v6.18.29
v6.18.3
v6.18.30
v6.18.31
v6.18.32
v6.18.33
v6.18.4
v6.18.5
v6.18.6
v6.18.7
v6.18.8
v6.18.9
v7.*
v7.0.0