Facade Ignition
3 CVEs affecting Facade Ignition. Latest disclosed: 2021-11-17. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43996 | Critical | 9.8 | 2021-11-17 | The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a "fix variable names" feature that can lead to incorrect access control. |
CVE-2021-3129 | Critical | 9.8 | 2021-01-12 | Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of fi… |
CVE-2020-13909 | Critical | 9.8 | 2020-06-07 | The Ignition component before 2.0.5 for Laravel mishandles globals, _get, _post, _cookie, and _env. NOTE: in the 1.x series, versions 1.16.15 and later are una… |