Exploited Vulnerabilities DailyCVE-2018-15133: Laravel Laravel Framework
EPSS76.8%No. 660 of 1739 in KEV
CVE year2018~6 yrs before listing
Same vendor in KEV3
Same product1
| Field | Value |
|---|---|
| Vendor | Laravel |
| Product | Laravel Framework |
| Name | Laravel Deserialization of Untrusted Data Vulnerability |
| Added to KEV | 2024-01-16 |
| US federal due date | 2024-02-06 |
| Ransomware use | Unknown |
| CWE | CWE-502 |
CISA description
Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A Laravel Laravel Framework vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-01-16.