{"action":"Upgrade laravel/framework to 6.20.45 or later.","affected":[{"fixed":"6.20.45","introduced":"0"},{"fixed":"7.30.7","introduced":"7.0.0"},{"fixed":"8.83.28","introduced":"8.0.0"},{"fixed":"9.52.17","introduced":"9.0.0"},{"fixed":"10.48.23","introduced":"10.0.0"},{"fixed":"11.31.0","introduced":"11.0.0"}],"component":"laravel/framework","cve_ids":["CVE-2024-52301"],"ecosystem":"Packagist","epss":0.44757,"exploited":false,"fixed_versions":["6.20.45","7.30.7","8.83.28","9.52.17","10.48.23","11.31.0"],"ghsa_id":"GHSA-gv7v-rgg6-548h","id":"tcs_01M5KF33KZE0MPAGZHR8AJ8SV1","modified_at":"2024-12-21T18:37:57.182411Z","published_at":"2024-11-12T22:08:42Z","references":["https://osv.dev/vulnerability/GHSA-gv7v-rgg6-548h","https://github.com/laravel/framework/security/advisories/GHSA-gv7v-rgg6-548h","https://nvd.nist.gov/vuln/detail/CVE-2024-52301","https://github.com/FriendsOfPHP/security-advisories/blob/master/laravel/framework/CVE-2024-52301.yaml","https://github.com/advisories/GHSA-gv7v-rgg6-548h","https://github.com/laravel/framework","https://lists.debian.org/debian-lts-announce/2024/12/msg00019.html"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-gv7v-rgg6-548h","url":"https://osv.dev/vulnerability/GHSA-gv7v-rgg6-548h"}],"summary":"Laravel environment manipulation via query string"}