CVE-2024-52301 - Vulnerability Details

Vendors	Products
Laravel	Framework

Link	Providers
https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h
https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html

Type	Values Removed	Values Added
References		https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html

Type	Values Removed	Values Added
Metrics	cvssV3_1 `{'score': 0.0, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N'}`

Type	Values Removed	Values Added
First Time appeared		Laravel Laravel framework
CPEs		cpe:2.3:a:laravel:framework::::::::
Vendors & Products		Laravel Laravel framework
Metrics		cvssV3_1 `{'score': 0, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs.
Title		Laravel allows environment manipulation via query string
Weaknesses		CWE-88
References		https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h
Metrics		cvssV4_0 `{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-52301", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-11-06T19:00:26.396Z", "datePublished": "2024-11-12T19:32:14.415Z", "dateUpdated": "2024-12-21T17:02:39.839Z"}, "containers": {"cna": {"title": "Laravel allows environment manipulation via query string", "problemTypes": [{"descriptions": [{"cweId": "CWE-88", "lang": "en", "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "baseScore": 8.7, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h"}], "affected": [{"vendor": "laravel", "product": "framework", "versions": [{"version": "< 6.20.45", "status": "affected"}, {"version": ">= 7.0.0, < 7.30.7", "status": "affected"}, {"version": ">= 8.0.0, < 8.83.28", "status": "affected"}, {"version": ">= 9.0.0, < 9.52.17", "status": "affected"}, {"version": ">= 10.0.0, < 10.48.23", "status": "affected"}, {"version": ">= 11.0.0, < 11.31.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-11-12T19:32:14.415Z"}, "descriptions": [{"lang": "en", "value": "Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs."}], "source": {"advisory": "GHSA-gv7v-rgg6-548h", "discovery": "UNKNOWN"}}, "adp": [{"affected": [{"vendor": "laravel", "product": "framework", "cpes": ["cpe:2.3:a:laravel:framework:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "6.20.45", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThanOrEqual": "7.0.0", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "7.30.7", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThanOrEqual": "8.0.0", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "8.83.28", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThanOrEqual": "9.0.0", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "9.52.17", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThanOrEqual": "10.0.0", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "10.48.23", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThanOrEqual": "11.0.0", "versionType": "custom"}, {"version": "0", "status": "affected", "lessThan": "11.31.0", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-11-13T14:51:08.466106Z", "id": "CVE-2024-52301", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-21T16:14:52.925Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-12-21T17:02:39.839Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-52301 (string)

assignerOrgId : a0819718-46f1-4df5-94e2-005712e83aaa (string)

state : PUBLISHED (string)

assignerShortName : GitHub_M (string)

dateReserved : 2024-11-06T19:00:26.396Z (string)

datePublished : 2024-11-12T19:32:14.415Z (string)

dateUpdated : 2024-12-21T17:02:39.839Z (string)

}

containers : { »

cna : { »

title : Laravel allows environment manipulation via query string (string)

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-88 (string)

lang : en (string)

description : CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (string)

type : CWE (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV4_0 : { »

attackVector : NETWORK (string)

attackComplexity : LOW (string)

attackRequirements : NONE (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

vulnConfidentialityImpact : NONE (string)

vulnIntegrityImpact : HIGH (string)

vulnAvailabilityImpact : NONE (string)

subConfidentialityImpact : NONE (string)

subIntegrityImpact : NONE (string)

subAvailabilityImpact : NONE (string)

baseScore : 8.7 (number)

baseSeverity : HIGH (string)

vectorString : CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N (string)

version : 4.0 (string)

}

]

references : [ »

0 : { »

name : https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h (string)

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h (string)

}

]

affected : [ »

0 : { »

vendor : laravel (string)

product : framework (string)

versions : [ »

0 : { »

version : < 6.20.45 (string)

status : affected (string)

}

1 : { »

version : >= 7.0.0, < 7.30.7 (string)

status : affected (string)

}

2 : { »

version : >= 8.0.0, < 8.83.28 (string)

status : affected (string)

}

3 : { »

version : >= 9.0.0, < 9.52.17 (string)

status : affected (string)

}

4 : { »

version : >= 10.0.0, < 10.48.23 (string)

status : affected (string)

}

5 : { »

version : >= 11.0.0, < 11.31.0 (string)

status : affected (string)

}

]

}

]

providerMetadata : { »

orgId : a0819718-46f1-4df5-94e2-005712e83aaa (string)

shortName : GitHub_M (string)

dateUpdated : 2024-11-12T19:32:14.415Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs. (string)

}

]

source : { »

advisory : GHSA-gv7v-rgg6-548h (string)

discovery : UNKNOWN (string)

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : laravel (string)

product : framework (string)

cpes : [ »

0 : cpe:2.3:a:laravel:framework:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 6.20.45 (string)

versionType : custom (string)

}

1 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 7.0.0 (string)

versionType : custom (string)

}

2 : { »

version : 0 (string)

status : affected (string)

lessThan : 7.30.7 (string)

versionType : custom (string)

}

3 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 8.0.0 (string)

versionType : custom (string)

}

4 : { »

version : 0 (string)

status : affected (string)

lessThan : 8.83.28 (string)

versionType : custom (string)

}

5 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 9.0.0 (string)

versionType : custom (string)

}

6 : { »

version : 0 (string)

status : affected (string)

lessThan : 9.52.17 (string)

versionType : custom (string)

}

7 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 10.0.0 (string)

versionType : custom (string)

}

8 : { »

version : 0 (string)

status : affected (string)

lessThan : 10.48.23 (string)

versionType : custom (string)

}

9 : { »

version : 0 (string)

status : affected (string)

lessThanOrEqual : 11.0.0 (string)

versionType : custom (string)

}

10 : { »

version : 0 (string)

status : affected (string)

lessThan : 11.31.0 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-11-13T14:51:08.466106Z (string)

id : CVE-2024-52301 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-21T16:14:52.925Z (string)

}

1 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html (string)

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-12-21T17:02:39.839Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-12-21T17:02:39.839Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-52301", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-11-13T14:51:08.466106Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:laravel:framework:*:*:*:*:*:*:*:*"], "vendor": "laravel", "product": "framework", "versions": [{"status": "affected", "version": "0", "lessThan": "6.20.45", "versionType": "custom"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "7.0.0"}, {"status": "affected", "version": "0", "lessThan": "7.30.7", "versionType": "custom"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "8.0.0"}, {"status": "affected", "version": "0", "lessThan": "8.83.28", "versionType": "custom"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "9.0.0"}, {"status": "affected", "version": "0", "lessThan": "9.52.17", "versionType": "custom"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "10.0.0"}, {"status": "affected", "version": "0", "lessThan": "10.48.23", "versionType": "custom"}, {"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "11.0.0"}, {"status": "affected", "version": "0", "lessThan": "11.31.0", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-13T14:47:40.395Z"}}], "cna": {"title": "Laravel allows environment manipulation via query string", "source": {"advisory": "GHSA-gv7v-rgg6-548h", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 8.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE"}}], "affected": [{"vendor": "laravel", "product": "framework", "versions": [{"status": "affected", "version": "< 6.20.45"}, {"status": "affected", "version": ">= 7.0.0, < 7.30.7"}, {"status": "affected", "version": ">= 8.0.0, < 8.83.28"}, {"status": "affected", "version": ">= 9.0.0, < 9.52.17"}, {"status": "affected", "version": ">= 10.0.0, < 10.48.23"}, {"status": "affected", "version": ">= 11.0.0, < 11.31.0"}]}], "references": [{"url": "https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "name": "https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h", "tags": ["x_refsource_CONFIRM"]}], "descriptions": [{"lang": "en", "value": "Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-88", "description": "CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-11-12T19:32:14.415Z"}}}, "cveMetadata": {"cveId": "CVE-2024-52301", "state": "PUBLISHED", "dateUpdated": "2024-12-21T17:02:39.839Z", "dateReserved": "2024-11-06T19:00:26.396Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-11-12T19:32:14.415Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html (string)

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-12-21T17:02:39.839Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-52301 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-11-13T14:51:08.466106Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:laravel:framework:*:*:*:*:*:*:*:* (string)

]

vendor : laravel (string)

product : framework (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 6.20.45 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 7.0.0 (string)

}

2 : { »

status : affected (string)

version : 0 (string)

lessThan : 7.30.7 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 8.0.0 (string)

}

4 : { »

status : affected (string)

version : 0 (string)

lessThan : 8.83.28 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 9.0.0 (string)

}

6 : { »

status : affected (string)

version : 0 (string)

lessThan : 9.52.17 (string)

versionType : custom (string)

}

7 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 10.0.0 (string)

}

8 : { »

status : affected (string)

version : 0 (string)

lessThan : 10.48.23 (string)

versionType : custom (string)

}

9 : { »

status : affected (string)

version : 0 (string)

versionType : custom (string)

lessThanOrEqual : 11.0.0 (string)

}

10 : { »

status : affected (string)

version : 0 (string)

lessThan : 11.31.0 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-13T14:47:40.395Z (string)

}

]

cna : { »

title : Laravel allows environment manipulation via query string (string)

source : { »

advisory : GHSA-gv7v-rgg6-548h (string)

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

cvssV4_0 : { »

version : 4.0 (string)

baseScore : 8.7 (number)

attackVector : NETWORK (string)

baseSeverity : HIGH (string)

vectorString : CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

attackRequirements : NONE (string)

privilegesRequired : NONE (string)

subIntegrityImpact : NONE (string)

vulnIntegrityImpact : HIGH (string)

subAvailabilityImpact : NONE (string)

vulnAvailabilityImpact : NONE (string)

subConfidentialityImpact : NONE (string)

vulnConfidentialityImpact : NONE (string)

}

]

affected : [ »

0 : { »

vendor : laravel (string)

product : framework (string)

versions : [ »

0 : { »

status : affected (string)

version : < 6.20.45 (string)

}

1 : { »

status : affected (string)

version : >= 7.0.0, < 7.30.7 (string)

}

2 : { »

status : affected (string)

version : >= 8.0.0, < 8.83.28 (string)

}

3 : { »

status : affected (string)

version : >= 9.0.0, < 9.52.17 (string)

}

4 : { »

status : affected (string)

version : >= 10.0.0, < 10.48.23 (string)

}

5 : { »

status : affected (string)

version : >= 11.0.0, < 11.31.0 (string)

}

]

}

]

references : [ »

0 : { »

url : https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h (string)

name : https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h (string)

tags : [ »

0 : x_refsource_CONFIRM (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-88 (string)

description : CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : a0819718-46f1-4df5-94e2-005712e83aaa (string)

shortName : GitHub_M (string)

dateUpdated : 2024-11-12T19:32:14.415Z (string)

}

cveMetadata : { »

cveId : CVE-2024-52301 (string)

state : PUBLISHED (string)

dateUpdated : 2024-12-21T17:02:39.839Z (string)

dateReserved : 2024-11-06T19:00:26.396Z (string)

assignerOrgId : a0819718-46f1-4df5-94e2-005712e83aaa (string)

datePublished : 2024-11-12T19:32:14.415Z (string)

assignerShortName : GitHub_M (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs."}, {"lang": "es", "value": "Laravel es un framework de aplicaciones web. Cuando la directiva de php register_argc_argv est\u00e1 establecida en on y los usuarios llaman a cualquier URL con una cadena de consulta especialmente manipulada, pueden cambiar el entorno que utiliza el framework al procesar la solicitud. La vulnerabilidad se corrigi\u00f3 en 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23 y 11.31.0. El framework ahora ignora los valores argv para la detecci\u00f3n del entorno en SAPI que no son de CLI."}], "id": "CVE-2024-52301", "lastModified": "2024-12-21T17:15:18.207", "metrics": {"cvssMetricV40": [{"cvssData": {"attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "automatable": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "baseScore": 8.7, "baseSeverity": "HIGH", "confidentialityRequirements": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "recovery": "NOT_DEFINED", "safety": "NOT_DEFINED", "subsequentSystemAvailability": "NONE", "subsequentSystemConfidentiality": "NONE", "subsequentSystemIntegrity": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnerabilityResponseEffort": "NOT_DEFINED", "vulnerableSystemAvailability": "NONE", "vulnerableSystemConfidentiality": "NONE", "vulnerableSystemIntegrity": "HIGH"}, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2024-11-12T20:15:14.087", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Awaiting Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-88"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23, and 11.31.0. The framework now ignores argv values for environment detection on non-cli SAPIs. (string)

}

1 : { »

lang : es (string)

value : Laravel es un framework de aplicaciones web. Cuando la directiva de php register_argc_argv está establecida en on y los usuarios llaman a cualquier URL con una cadena de consulta especialmente manipulada, pueden cambiar el entorno que utiliza el framework al procesar la solicitud. La vulnerabilidad se corrigió en 6.20.45, 7.30.7, 8.83.28, 9.52.17, 10.48.23 y 11.31.0. El framework ahora ignora los valores argv para la detección del entorno en SAPI que no son de CLI. (string)

}

]

id : CVE-2024-52301 (string)

lastModified : 2024-12-21T17:15:18.207 (string)

metrics : { »

cvssMetricV40 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackRequirements : NONE (string)

attackVector : NETWORK (string)

automatable : NOT_DEFINED (string)

availabilityRequirements : NOT_DEFINED (string)

baseScore : 8.7 (number)

baseSeverity : HIGH (string)

confidentialityRequirements : NOT_DEFINED (string)

exploitMaturity : NOT_DEFINED (string)

integrityRequirements : NOT_DEFINED (string)

modifiedAttackComplexity : NOT_DEFINED (string)

modifiedAttackRequirements : NOT_DEFINED (string)

modifiedAttackVector : NOT_DEFINED (string)

modifiedPrivilegesRequired : NOT_DEFINED (string)

modifiedSubsequentSystemAvailability : NOT_DEFINED (string)

modifiedSubsequentSystemConfidentiality : NOT_DEFINED (string)

modifiedSubsequentSystemIntegrity : NOT_DEFINED (string)

modifiedUserInteraction : NOT_DEFINED (string)

modifiedVulnerableSystemAvailability : NOT_DEFINED (string)

modifiedVulnerableSystemConfidentiality : NOT_DEFINED (string)

modifiedVulnerableSystemIntegrity : NOT_DEFINED (string)

privilegesRequired : NONE (string)

providerUrgency : NOT_DEFINED (string)

recovery : NOT_DEFINED (string)

safety : NOT_DEFINED (string)

subsequentSystemAvailability : NONE (string)

subsequentSystemConfidentiality : NONE (string)

subsequentSystemIntegrity : NONE (string)

userInteraction : NONE (string)

valueDensity : NOT_DEFINED (string)

vectorString : CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X (string)

version : 4.0 (string)

vulnerabilityResponseEffort : NOT_DEFINED (string)

vulnerableSystemAvailability : NONE (string)

vulnerableSystemConfidentiality : NONE (string)

vulnerableSystemIntegrity : HIGH (string)

}

source : security-advisories@github.com (string)

type : Secondary (string)

}

]

}

published : 2024-11-12T20:15:14.087 (string)

references : [ »

0 : { »

source : security-advisories@github.com (string)

url : https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html (string)

}

]

sourceIdentifier : security-advisories@github.com (string)

vulnStatus : Awaiting Analysis (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-88 (string)

}

]

source : security-advisories@github.com (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object