CVE-2022-2886: Laravel deserialization
Published Aug 19, 2022
·Updated
A vulnerability, which was classified as critical, was found in Laravel 5.1. Affected is an unknown function. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-206688.
Affected Software
1 affected component
Laravel Laravel>=5.1.0<=5.1.46
Event History
Aug 19, 2022
CVE Published
via MITRE·12:00 PM
Data Sourced
via MITRE·12:00 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-2886?
The severity of CVE-2022-2886 is high with a CVSS score of 8.8.
2
How does CVE-2022-2886 affect Laravel 5.1?
CVE-2022-2886 affects Laravel 5.1 through an unknown function that allows remote attackers to perform deserialization attacks.
3
Is CVE-2022-2886 publicly disclosed?
Yes, CVE-2022-2886 has been disclosed to the public and may be actively exploited.
4
Can CVE-2022-2886 be exploited remotely?
Yes, CVE-2022-2886 can be exploited remotely.
5
How can I fix the vulnerability in Laravel 5.1?
To fix the vulnerability in Laravel 5.1, it is recommended to upgrade to a version above 5.1.46.