Security context
High· 0.0GHSA-gv7v-rgg6-548h CVE-2024-52301CWE-88Published Nov 12, 2024

Laravel environment manipulation via query string

Research this vulnerability

Research is free — Hunters explains how the bug works, the root-cause code pattern, how the fix addresses it, and how to test whether a target is affected, in chat. Investigate & write exploit is a paid run — the engine reads the advisory and fix commits, then builds and validates a working proof-of-concept exploit with reproduction steps.

Affected versions

0 → fixed in 6.20.457.0.0 → fixed in 7.30.78.0.0 → fixed in 8.83.289.0.0 → fixed in 9.52.1710.0.0 → fixed in 10.48.2311.0.0 → fixed in 11.31.0

Details

## Description When the `register_argc_argv php` directive is set to `on` , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. ## Resolution The framework now ignores argv values for environment detection on non-cli SAPIs.

The fix

No fix commit could be resolved for this advisory (it may reference an issue tracker or a non-GitHub patch). See the references below.

References