Arbitrary Argument Injection Affecting laravel/framework package, versions <6.20.45 >=7.0.0, <7.30.7 >=8.0.0, <8.83.28 >=9.0.0, <9.52.17 >=10.0.0, <10.48.23 >=11.0.0, <11.31.0
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PHP-LARAVELFRAMEWORK-8367200
- published 13 Nov 2024
- disclosed 12 Nov 2024
- credit Unknown
Introduced: 12 Nov 2024
New CVE-2024-52301 Open this link in a new tabHow to fix?
Upgrade laravel/framework to version 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, 11.31.0 or higher.
Overview
laravel/framework is a PHP framework for web artisans.
Affected versions of this package are vulnerable to Arbitrary Argument Injection when the register_argc_argv directive is set to on. An attacker can manipulate the application environment by sending a specially crafted query string.