CVE-2020-24940
1 advisory.
Packagist/illuminate/database CVE-2020-24940: high 7.5
Guard bypass in Eloquent models affecting Laravel illuminate database component
Action: Upgrade illuminate/database to 6.18.34 or later.
composer require illuminate/database:6.18.34composer require illuminate/database:7.23.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.5.0 | - | 5.5.44 |
| 6.0.0 | 6.18.34 | - |
| 7.0.0 | 7.23.2 | - |
Fixed versions
| 6.18.34 | 7.23.2 |
Sources
- osv: GHSA-c7rm-w2hj-x8g3
- https://nvd.nist.gov/vuln/detail/CVE-2020-24940
- https://blog.laravel.com/security-release-laravel-61834-7232
- https://github.com/FriendsOfPHP/security-advisories/blob/master/illuminate/database/CVE-2020-24940.yaml
- https://github.com/illuminate/database
CVE-2020-24940 · published · modified · JSON