Browse / CVEs / CVE-2018-15133
CVE-2018-15133· laravel / laravel framework· CWE-502
Laravel Deserialization of Untrusted Data Vulnerability
Exploited in the wild. Listed by CISA on 2024-01-16; known to be used by ransomware.
76.6%likelihood of exploitation, next 30 days
100%of all CVEs are less likely
Nonecheck to confirm it
Laravel Framework contains a deserialization of untrusted data vulnerability, allowing for remote command execution. This vulnerability may only be exploited if a malicious user has accessed the application encryption key (APP_KEY environment variable).
No ready check is stored for this CVE. Confirm it by hand from the references.
References
Use this check only on systems you are authorised to test. Where the data comes from