CVE-2022-2870

Published: Aug 17, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A vulnerability was found in laravel 5.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206501 was assigned to this vulnerability.

Affected (1)

Products: Laravel: Laravel

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Laravel Laravel	From 5.1.0 to 5.1.46

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (4)

https://github.com/beicheng-maker/vulns/issues/2

Source: cna@vuldb.com

ExploitIssue TrackingThird Party Advisory

https://vuldb.com/?id.206501

Source: cna@vuldb.com

Third Party Advisory

https://github.com/beicheng-maker/vulns/issues/2

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://vuldb.com/?id.206501

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.