Vulnerabilities > CVE-2022-40482 - Information Exposure Through Discrepancy vulnerability in Laravel Framework

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

NONE

Availability impact

NONE

network

low complexity

laravel

CWE-203

NVD

Published: 2023-04-25

Updated: 2023-05-04

Summary

The authentication method in Laravel 8.x through 9.x before 9.32.0 was discovered to be vulnerable to user enumeration via timeless timing attacks with HTTP/2 multiplexing. This is caused by the early return inside the hasValidCredentials method in the Illuminate\Auth\SessionGuard class when a user is found to not exist.

Vulnerable Configurations

Part	Description	Count
Application	Laravel Laravel Framework 8.0.0 Laravel Framework 8.0.1 Laravel Framework 8.0.2 Laravel Framework 8.0.3 Laravel Framework 8.0.4 Laravel Framework 8.1.0 Laravel Framework 8.2.0 Laravel Framework 8.3.0 Laravel Framework 8.4.0 Laravel Framework 8.5.0 Laravel Framework 8.6.0 Laravel Framework 8.7.0 Laravel Framework 8.7.1 Laravel Framework 8.8.0 Laravel Framework 8.9.0 Laravel Framework 8.10.0 Laravel Framework 8.11.0 Laravel Framework 8.11.1 Laravel Framework 8.11.2 Laravel Framework 8.12.0 Laravel Framework 8.12.1 Laravel Framework 8.12.2 Laravel Framework 8.12.3 Laravel Framework 8.13.0 Laravel Framework 8.14.0 Laravel Framework 8.15.0 Laravel Framework 8.16.0 Laravel Framework 8.16.1 Laravel Framework 8.17.0 Laravel Framework 8.17.1 Laravel Framework 8.17.2 Laravel Framework 8.18.0 Laravel Framework 8.18.1 Laravel Framework 8.19.0 Laravel Framework 8.20.0 Laravel Framework 8.20.1 Laravel Framework 8.21.0 Laravel Framework 8.22.0 Laravel Framework 8.22.1 Laravel Framework 8.23.0 Laravel Framework 8.23.1 Laravel Framework 8.24.0 Laravel Framework 8.25.0 Laravel Framework 8.26.0 Laravel Framework 8.26.1 Laravel Framework 8.27.0 Laravel Framework 8.28.0 Laravel Framework 8.28.1 Laravel Framework 8.29.0 Laravel Framework 8.30.0 Laravel Framework 8.30.1 Laravel Framework 8.31.0 Laravel Framework 8.32.0 Laravel Framework 8.32.1 Laravel Framework 8.33.0 Laravel Framework 8.33.1 Laravel Framework 8.34.0 Laravel Framework 8.35.0 Laravel Framework 8.35.1 Laravel Framework 8.36.0 Laravel Framework 8.36.1 Laravel Framework 8.36.2 Laravel Framework 8.37.0 Laravel Framework 8.38.0 Laravel Framework 8.39.0 Laravel Framework 8.40.0 Laravel Framework 8.41.0 Laravel Framework 8.42.0 Laravel Framework 8.42.1 Laravel Framework 8.43.0 Laravel Framework 8.44.0 Laravel Framework 8.45.0 Laravel Framework 8.45.1 Laravel Framework 8.46.0 Laravel Framework 8.47.0 Laravel Framework 8.48.0 Laravel Framework 8.48.1 Laravel Framework 8.48.2 Laravel Framework 8.49.0 Laravel Framework 8.49.1 Laravel Framework 8.49.2 Laravel Framework 8.50.0 Laravel Framework 8.51.0 Laravel Framework 8.52.0 Laravel Framework 8.53.0 Laravel Framework 8.53.1 Laravel Framework 8.54.0 Laravel Framework 8.55.0 Laravel Framework 8.56.0 Laravel Framework 8.57.0 Laravel Framework 8.58.0 Laravel Framework 8.59.0 Laravel Framework 8.60.0 Laravel Framework 8.61.0 Laravel Framework 8.62.0 Laravel Framework 8.63.0 Laravel Framework 8.64.0 Laravel Framework 8.65.0 Laravel Framework 8.66.0 Laravel Framework 8.67.0 Laravel Framework 8.68.0 Laravel Framework 8.68.1 Laravel Framework 8.69.0 Laravel Framework 8.70.0 Laravel Framework 8.70.1 Laravel Framework 8.70.2 Laravel Framework 8.71.0 Laravel Framework 8.72.0 Laravel Framework 8.73.0 Laravel Framework 8.73.1 Laravel Framework 8.73.2 Laravel Framework 8.74.0 Laravel Framework 8.75.0 Laravel Framework 8.76.0 Laravel Framework 8.76.1 Laravel Framework 8.76.2 Laravel Framework 8.77.0 Laravel Framework 8.77.1 Laravel Framework 8.78.0 Laravel Framework 8.78.1 Laravel Framework 8.79.0 Laravel Framework 8.80.0 Laravel Framework 8.81.0 Laravel Framework 8.82.0 Laravel Framework 8.83.0 Laravel Framework 8.83.1 Laravel Framework 8.83.2 Laravel Framework 8.83.3 Laravel Framework 8.83.4 Laravel Framework 8.83.5 Laravel Framework 8.83.6 Laravel Framework 8.83.7 Laravel Framework 8.83.8 Laravel Framework 8.83.9 Laravel Framework 8.83.10 Laravel Framework 8.83.11 Laravel Framework 8.83.12 Laravel Framework 8.83.13 Laravel Framework 8.83.14 Laravel Framework 8.83.15 Laravel Framework 8.83.16 Laravel Framework 8.83.17 Laravel Framework 8.83.18 Laravel Framework 8.83.19 Laravel Framework 8.83.20 Laravel Framework 8.83.21 Laravel Framework 8.83.22 Laravel Framework 8.83.23 Laravel Framework 8.83.24 Laravel Framework 8.83.25 Laravel Framework 8.83.26 Laravel Framework 8.83.27 Laravel Framework 9.0.0 Laravel Framework 9.0.1 Laravel Framework 9.0.2 Laravel Framework 9.1.0 Laravel Framework 9.2.0 Laravel Framework 9.3.0 Laravel Framework 9.3.1 Laravel Framework 9.4.0 Laravel Framework 9.4.1 Laravel Framework 9.5.0 Laravel Framework 9.5.1 Laravel Framework 9.6.0 Laravel Framework 9.7.0 Laravel Framework 9.8.0 Laravel Framework 9.8.1 Laravel Framework 9.9.0 Laravel Framework 9.10.0 Laravel Framework 9.10.1 Laravel Framework 9.11.0 Laravel Framework 9.12.0 Laravel Framework 9.12.1 Laravel Framework 9.12.2 Laravel Framework 9.13.0 Laravel Framework 9.14.0 Laravel Framework 9.14.1 Laravel Framework 9.15.0 Laravel Framework 9.16.0 Laravel Framework 9.17.0 Laravel Framework 9.18.0 Laravel Framework 9.19.0 Laravel Framework 9.20.0 Laravel Framework 9.21.0 Laravel Framework 9.21.1 Laravel Framework 9.21.2 Laravel Framework 9.21.3 Laravel Framework 9.21.4 Laravel Framework 9.21.5 Laravel Framework 9.21.6 Laravel Framework 9.22.0 Laravel Framework 9.22.1 Laravel Framework 9.23.0 Laravel Framework 9.24.0 Laravel Framework 9.25.0 Laravel Framework 9.25.1 Laravel Framework 9.26.0 Laravel Framework 9.26.1 Laravel Framework 9.27.0 Laravel Framework 9.28.0 Laravel Framework 9.29.0 Laravel Framework 9.30.0 Laravel Framework 9.30.1 Laravel Framework 9.31.0	209

Common Weakness Enumeration (CWE)

CWE-203 - Information Exposure Through Discrepancy

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References