CVE-2024-29291
45Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actepss 1.3%
from disclosure to weapon5 days
Published on NVDApr 16
1st PoC+5d
VulnCheck+317d
exploitation probability
1.3%top 31% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log. NOTE: this is disputed by multiple third parties because the owner of a Laravel Framework installation can choose to have debugging logs, but needs to set the access control appropriately for the type of data that may be logged.
Affected products
n/a · n/apublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/52000unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.