CVE-2020-24940: Input Validation
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database component in some situations in which table names are stripped during a mass assignment.
Other sources
An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-24940?
CVE-2020-24940 is a vulnerability in Laravel that allows unvalidated values to be saved to the database in certain situations during a mass assignment.
What is the severity of CVE-2020-24940?
CVE-2020-24940 has a severity rating of 7.5 (High).
Which versions of Laravel are affected by CVE-2020-24940?
CVE-2020-24940 affects Laravel versions before 6.18.34 and 7.x before 7.23.2.
How can I fix CVE-2020-24940?
To fix CVE-2020-24940, you should update Laravel to version 6.18.34 or 7.23.2.
Where can I find more information about CVE-2020-24940?
More information about CVE-2020-24940 can be found at the following reference: https://blog.laravel.com/security-release-laravel-61834-7232.