high7.5Public exploit code
CVE-2018-8947
rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass inten…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Laravel Log Viewer < 0.13.0 - Local File Download2018-03-26 · webapps · php
Impact
rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Laravel Log Viewer Project | Laravel Log Viewer | before 0.13.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/rap2hpoutre/laravel-log-viewer/commit/cda89c06dc5331d06fab863d7cb1c4047ad68357
- https://github.com/rap2hpoutre/laravel-log-viewer/releases/tag/v0.13.0
- https://www.exploit-db.com/exploits/44343/
- https://github.com/rap2hpoutre/laravel-log-viewer/commit/cda89c06dc5331d06fab863d7cb1c4047ad68357
- https://github.com/rap2hpoutre/laravel-log-viewer/releases/tag/v0.13.0
- https://www.exploit-db.com/exploits/44343/