CVE-2018-15133
100Vexday Risk Score
Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.
ssvc Actcvss 8.1epss 77%
de la publicación al arma5 días
Publicada en NVD9 ago
1ª PoC+5d
metasploit7 ago
CISA KEV+1986d
probabilidad de explotación
77%top 1% de las CVE
explotación observada
síCISA + VulnCheck
27 exploit(s) público(s)
Acción exigida por CISAplazo federal: 2024-02-06
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Versiones
Afectadas
>= 0
Investigado y redactado con IA a partir del advisory del fabricante y análisis públicos, con las fuentes citadas. Verifica siempre la versión corregida en el advisory oficial antes de actuar.
In Laravel Framework through 5.5.40 and 5.6.x through 5.6.29, remote code execution might occur as a result of an unserialize call on a potentially untrusted X-XSRF-TOKEN value. This involves the decrypt method in Illuminate/Encryption/Encrypter.php and PendingBroadcast in gadgetchains/Laravel/RCE/3/chain.php in phpggc. The attacker must know the application key, which normally would never occur, but could happen if the attacker previously had privileged access or successfully accomplished a previous attack.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/aPoCs públicas encontradas — 27✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47129githubgithub.com/kozmic/laravel-poc-CVE-2018-15133★ 258githubgithub.com/aljavier/exploit_laravel_cve-2018-15133★ 57githubgithub.com/pwnedshell/Larascript★ 35githubgithub.com/Prabesh01/Laravel-PHP-Unit-RCE-Auto-shell-uploader★ 6githubgithub.com/AzhariKun/CVE-2018-15133★ 3githubgithub.com/yeahhbean/Laravel-CVE-2018-15133★ 1githubgithub.com/NatteeSetobol/CVE-2018-15133-Lavel-Expliot★ 0githubgithub.com/Cr4zyD14m0nd137/Lab-for-cve-2018-15133★ 0githubgithub.com/0xSalle/cve-2018-15133★ 0githubgithub.com/Loaxert/CVE-2018-15133-PoC★ 0githubgithub.com/bukitbarisan/laravel-rce-cve-2018-15133★ 0githubgithub.com/flame-11/CVE-2018-15133-laravel-framework★ 0githubgithub.com/AlienX2001/better-poc-for-CVE-2018-15133★ 0githubgithub.com/Bilelxdz/Laravel-CVE-2018-15133★ 0vulncheckvulncheck.com/xdb/2ce024551afbno verificadovulncheckvulncheck.com/xdb/bb622dfa8b57no verificadovulncheckvulncheck.com/xdb/8027eabdd92dno verificadovulncheckvulncheck.com/xdb/b1064b8f348ano verificadovulncheckvulncheck.com/xdb/0a29cfc05e95no verificadovulncheckvulncheck.com/xdb/2c6de6585be5no verificadovulncheckvulncheck.com/xdb/be7a45b53d16no verificadovulncheckvulncheck.com/xdb/3004cb8714e9no verificadovulncheckvulncheck.com/xdb/b31ca993356fno verificadovulncheckvulncheck.com/xdb/45e7d1957c7fno verificadovulncheckvulncheck.com/xdb/7fa45a25cb32no verificadocve_referencepacketstormsecurity.com/files/153641/PHP-Laravel-Framework-Token-Unserialize-Remote-Command-Execution.htmlno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.