Laravel Holdings Inc. vulnerabilities
3 vulnerabilities
Known vulnerabilities in Laravel Holdings Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Laravel Framework2 vulnerabilities
- Laravel Nova1 vulnerabilities
HighCVE-2020-36950laravel holdings inc. · laravel novaLaravel Nova 3.7.0 - 'range' DoSLaravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter. Attackers can send simultaneous requests with an extremely high range value to overwhelm and crash the server.EPSS0.37%HighCVE-2024-13919laravel holdings inc. · laravel framework +1 moreLaravel Reflected XSS via Route Parameter in Debug-Mode Error PageThe Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.EPSS0.53%HighCVE-2024-13918laravel holdings inc. · laravel framework +1 moreLaravel Reflected XSS via Request Parameter in Debug-Mode Error PageThe Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page.EPSS0.60%