CVE-2020-24941

An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*
cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*

History

21 Nov 2024, 05:16

Type Values Removed Values Added
References () https://blog.laravel.com/security-release-laravel-61835-7240 - Vendor Advisory () https://blog.laravel.com/security-release-laravel-61835-7240 - Vendor Advisory

Information

Published : 2020-09-04 02:15

Updated : 2024-11-21 05:16


NVD link : CVE-2020-24941

Mitre link : CVE-2020-24941

CVE.ORG link : CVE-2020-24941


JSON object : View

Products Affected

laravel

  • laravel
CWE
CWE-863

Incorrect Authorization