critical9.8
CVE-2021-43996
Incorrect Access Control in Ignition
Impact
The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a "fix variable names" feature that can lead to incorrect access control.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | facade/ignition | < 1.16.15 | 1.16.15 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Facade | Ignition | before 1.6.15 from 2.0.0 before 2.0.6 |