Vulnerabilities > Laravel > Laravel > 5.6.18

DATE CVE VULNERABILITY TITLE RISK
2020-09-04 CVE-2020-24941 Improper Input Validation vulnerability in Laravel
An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0.
network
laravel CWE-20
4.3
4.3
2020-09-04 CVE-2020-24940 Improper Input Validation vulnerability in Laravel
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2.
network
laravel CWE-20
4.3
4.3
2018-08-09 CVE-2018-15133 Deserialization of Untrusted Data vulnerability in Laravel
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value.
network
high complexity
laravel CWE-502
8.1
8.1