CVE-2024-29291

{"id": "CVE-2024-29291", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {}, "published": "2024-04-16T23:15:08.767", "references": [{"url": "https://gist.github.com/whiteman007/43bd7fa1fa0e47554b33f0cf93066784", "source": "cve@mitre.org"}, {"url": "https://gist.github.com/whiteman007/43bd7fa1fa0e47554b33f0cf93066784", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log. NOTE: this is disputed by multiple third parties because the owner of a Laravel Framework installation can choose to have debugging logs, but needs to set the access control appropriately for the type of data that may be logged."}, {"lang": "es", "value": "Un problema en Laravel Framework 8 a 11 podr\u00eda permitir que un atacante remoto descubra las credenciales de la base de datos en Storage/logs/laravel.log."}], "lastModified": "2024-11-21T09:07:55.147", "sourceIdentifier": "cve@mitre.org"}