CVE-2023-24065
Published:January 29, 2023
Updated:October 13, 2026
NOSH 4a5cfdb allows stored XSS via the create user page. For example, a first name (of a physician, assistant, or billing user) can have a JavaScript payload that is executed upon visiting the /users/2/1 page. This may allow attackers to steal Protected Health Information because the product is for health charting.
Affected Packages
sentry/sentry-laravel (PHP):
Affected version(s) =0.6.1 <0.6.2Fix Suggestion:
Update to version 0.6.2gab88slash/laravel-extended-stub (PHP):
Affected version(s) >=v5.2.23 <=v5.2.31.1Fix Suggestion:
Update to version no_fixalexkb/laravel-docker (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0chrsm/prayerletters (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devwiddy/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devhealthengine/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0opengis/laravel-geoserver (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0laravel/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-kattrali/maze-docker-install-from-dist <dev-laravel-9/testbenchFix Suggestion:
Update to version dev-laravel-9/testbenchbugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-laravel-10-test-fixture <dev-laravel-11-contextFix Suggestion:
Update to version dev-laravel-11-contextsentry/sentry-laravel (PHP):
Affected version(s) =dev-release/2.14.1 <2.14.2Fix Suggestion:
Update to version 2.14.2sonarsoftware/customer_portal (PHP):
Affected version(s) =0.0.1 <dev-dependabot/npm_and_yarn/portal/axios-0.19.0Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/portal/axios-0.19.0burgess1109/file_package (PHP):
Affected version(s) >=dev-master <=1.0.0Fix Suggestion:
Update to version no_fixjungle-gecko/sitarium (PHP):
Affected version(s) =v1.0.0 <v1.1.0Fix Suggestion:
Update to version v1.1.0bonsai/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.14.0 <v2.15.0-alpha-1Fix Suggestion:
Update to version v2.15.0-alpha-1digbang/laravel-project (PHP):
Affected version(s) =5.2.x-dev <5.3.0Fix Suggestion:
Update to version 5.3.0asgardcms/platform (PHP):
Affected version(s) =test <dev-dependabot/npm_and_yarn/Themes/Adminlte/axios-0.21.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/Themes/Adminlte/axios-0.21.1folklore/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0jefhar/laravel-domain-oriented (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-feature/read-context-from-exception <dev-feature/redis-cache-hit-missFix Suggestion:
Update to version dev-feature/redis-cache-hit-misschrsc/laraadmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9codicastudio/sentry-laravel (PHP):
Affected version(s) >=0.1.0 <=1.8.0Fix Suggestion:
Update to version no_fixcoloredcow/laravel-ccda (PHP):
Affected version(s) =dev-testFix Suggestion:
Update to version no_fixitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.4.x <0.4.1Fix Suggestion:
Update to version 0.4.1darekmeco/platform (PHP):
Affected version(s) >=dev-master <1.0.0Fix Suggestion:
Update to version 1.0.0jefhar/laravel-domain-oriented (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devtjventurini/laravel-blueprint (PHP):
Affected version(s) =5.2.x-dev <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) >=1.9.0 <2.2.0Fix Suggestion:
Update to version 2.2.0aasisvinayak/shop (PHP):
Affected version(s) =dev-dev <dev-masterFix Suggestion:
Update to version dev-mastercroudtech/sentry-laravel (PHP):
Affected version(s) >=dev-master <=1.7.3Fix Suggestion:
Update to version no_fixbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.7.1 <v2.8.0Fix Suggestion:
Update to version v2.8.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-cleanup-tracing-event-handler <dev-codecovFix Suggestion:
Update to version dev-codecovbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.17.0 <v2.20.1Fix Suggestion:
Update to version v2.20.1sentry/sentry-laravel (PHP):
Affected version(s) =0.10.0 <0.10.1Fix Suggestion:
Update to version 0.10.1deadem/djem (PHP):
Affected version(s) >=dev-master <=dev-vuetifyFix Suggestion:
Update to version no_fixchrsm/prayerletters (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0autotim/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0sonarsoftware/customer_portal (PHP):
Affected version(s) >=1.0.0 <1.0.25Fix Suggestion:
Update to version 1.0.25rubenarakelyan/laravel-session-files-to-redis (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devrsands2801/sentry-laravel (PHP):
Affected version(s) >=dev-master <0.4.0Fix Suggestion:
Update to version 0.4.0rsands2801/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.6.x <0.6.1Fix Suggestion:
Update to version 0.6.1jjsoft-ar/platform (PHP):
Affected version(s) =2.0.x-devFix Suggestion:
Update to version no_fixdotsyntax/scaffolding (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixasgardcms/platform (PHP):
Affected version(s) >=3.0.0 <dev-dependabot/npm_and_yarn/Themes/Adminlte/bootstrap-3.4.1Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/Themes/Adminlte/bootstrap-3.4.1bkwld/decoy (PHP):
Affected version(s) =5.3.0 <5.3.1Fix Suggestion:
Update to version 5.3.1myckhel/laravel-example-template (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0sentry/sentry-laravel (PHP):
Affected version(s) =1.2.0 <1.2.1Fix Suggestion:
Update to version 1.2.1sentry/sentry-laravel (PHP):
Affected version(s) =1.0.1 <1.0.2Fix Suggestion:
Update to version 1.0.2imaginacms/platform (PHP):
Affected version(s) >=2.0 <dev-imaginacms8.xFix Suggestion:
Update to version dev-imaginacms8.xsentry/sentry-laravel (PHP):
Affected version(s) =dev-byk/ref/modern-craft-config <dev-cache-eventsFix Suggestion:
Update to version dev-cache-eventslarashop/larashop (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixziperrom1/laravel-boilerplate (PHP):
Affected version(s) >=dev-dev <=v1.0.1-npm-publishFix Suggestion:
Update to version no_fixjayywalker/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0saritasa/opbeat-laravel (PHP):
Affected version(s) =dev-master <0.1.0Fix Suggestion:
Update to version 0.1.0andreadatri/maboro (PHP):
Affected version(s) =dev-devFix Suggestion:
Update to version no_fixbrnbio/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0conversoft/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0googleads/googleads-php-lib (PHP):
Affected version(s) =dev-update-symfony-serializer <dev-PierrickVoulet-patch-1Fix Suggestion:
Update to version dev-PierrickVoulet-patch-1itsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.7.x <0.8.0Fix Suggestion:
Update to version 0.8.0asgardcms/platform (PHP):
Affected version(s) >=3.5.0 <dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/Themes/Flatly/marked-4.0.10shopex/luban-desktop (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devmichalwolinski/wbiztool-laravel (PHP):
Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/composer/symfony/http-foundation-4.4.7Fix Suggestion:
Update to version dev-dependabot/composer/symfony/http-foundation-4.4.7auto-site-generator/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-laravel-8-maze-runner-fixture <dev-laravel8-queue-testsFix Suggestion:
Update to version dev-laravel8-queue-testsmmockelyn/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0itsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-laravel-4-x <10Fix Suggestion:
Update to version 10csgt/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-lighthouse-integration <dev-limit-query-sourceFix Suggestion:
Update to version dev-limit-query-sourcenbaskoff/beetlecms (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0sentry/sentry-laravel (PHP):
Affected version(s) =1.x-dev <dev-kamilogorek-patch-1Fix Suggestion:
Update to version dev-kamilogorek-patch-1macromindonline/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.6.x <0.6.1Fix Suggestion:
Update to version 0.6.1np21/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devimaginacms/platform (PHP):
Affected version(s) =dev-pinturas-update <dev-upstream-masterFix Suggestion:
Update to version dev-upstream-mastertaerp/finance (PHP):
Affected version(s) =1.0.0.x-devFix Suggestion:
Update to version no_fixphpsandbox/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devphpsandbox/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0rsands2801/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.5.x <0.6.0Fix Suggestion:
Update to version 0.6.0sentry/sentry-laravel (PHP):
Affected version(s) =0.11.0 <1.0.0-beta1Fix Suggestion:
Update to version 1.0.0-beta1bowero/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devlaravelfy/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-feature-flags <dev-fix-crash-when-sessions-disabledFix Suggestion:
Update to version dev-fix-crash-when-sessions-disableddentro/nge.noob (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devstaufenbiel/laravel (PHP):
Affected version(s) >=dev-master <=v0.1.12Fix Suggestion:
Update to version no_fixdrnkwati/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-auto-on-session-tracking <dev-discard-classesFix Suggestion:
Update to version dev-discard-classesdentro/nge.noob (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0brnbio/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devhakoncms/hakoncms (PHP):
Affected version(s) =dev-devFix Suggestion:
Update to version no_fixgoogleads/googleads-php-lib (PHP):
Affected version(s) =dev-update-php-72Fix Suggestion:
Update to version no_fixlaravel/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) >=dev-feature/fix-empty-transaction-context <dev-feature/github-actions-migrationFix Suggestion:
Update to version dev-feature/github-actions-migrationtrungtnm/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0ymonkey/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0imagina/cms-platform (PHP):
Affected version(s) >=2.0 <dev-imaginacms8.xFix Suggestion:
Update to version dev-imaginacms8.xsentry/sentry-laravel (PHP):
Affected version(s) =dev-test <dev-test-commandFix Suggestion:
Update to version dev-test-commandtahaghafuri/laravel-fix (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0milhouse1337/laravel (PHP):
Affected version(s) =v5.2.23 <v5.2.24Fix Suggestion:
Update to version v5.2.24prwlr/laravue (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0mshule/laravel-pipes (PHP):
Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <v1.2Fix Suggestion:
Update to version v1.2laravelista/kyle (PHP):
Affected version(s) =0.1.0 <0.2.0Fix Suggestion:
Update to version 0.2.0cvepdb/cms (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0itsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.8.x <0.9.0Fix Suggestion:
Update to version 0.9.0codex/codex (PHP):
Affected version(s) =dev-master <1.0.0Fix Suggestion:
Update to version 1.0.0sergeyugai/badpack (PHP):
Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/composer/symfony/http-kernel-5.4.20Fix Suggestion:
Update to version dev-dependabot/composer/symfony/http-kernel-5.4.20sentry/sentry-laravel (PHP):
Affected version(s) >=dev-release/2.9.0 <dev-release/2.10.0Fix Suggestion:
Update to version dev-release/2.10.0trungtnm/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =dev-fix-command-input-handling <dev-fix-consuming-body-streamFix Suggestion:
Update to version dev-fix-consuming-body-streamdrnkwati/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0yozh/test-newsblog (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devwiddy/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0wuhaohui/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =2.10.1 <dev-release/2.10.1Fix Suggestion:
Update to version dev-release/2.10.1bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-reinstate-unstable-tests <dev-temp/testFix Suggestion:
Update to version dev-temp/testitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.6.x <0.6.1Fix Suggestion:
Update to version 0.6.1nosh2/nosh2 (PHP):
Affected version(s) >=dev-dependabot/composer/guzzlehttp/guzzle-7.4.4 <=dev-dependabot/composer/laravel/framework-8.40.0Fix Suggestion:
Update to version no_fixitsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.5.x <0.6.0Fix Suggestion:
Update to version 0.6.0wbswjc/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) =v2.2.0 <v2.3.0Fix Suggestion:
Update to version v2.3.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.0.0 <v2.1.0Fix Suggestion:
Update to version v2.1.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-new-shutdown-strategy <dev-redacted-keysFix Suggestion:
Update to version dev-redacted-keysburgess1109/file_transfer (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) >=1.6.0 <1.7.1Fix Suggestion:
Update to version 1.7.1sentry/sentry-laravel (PHP):
Affected version(s) =dev-propose-span-helper <dev-queue-improvementsFix Suggestion:
Update to version dev-queue-improvementsdanieltorscho/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0thelegacy/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-master <dev-mdtro/add-dependency-reviewFix Suggestion:
Update to version dev-mdtro/add-dependency-reviewlivecms/livecms (PHP):
Affected version(s) >=v0.x-dev <v1.0.1Fix Suggestion:
Update to version v1.0.1yozh/test-newsblog (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0rubenarakelyan/laravel-session-files-to-redis (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0opengis/laravel-geoserver (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =dev-add-logger-context-as-extra-context <dev-add-more-user-context-attributesFix Suggestion:
Update to version dev-add-more-user-context-attributesshopex/luban-desktop (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-PLAT-13640-crumb <dev-PLAT-13642-laravel12Fix Suggestion:
Update to version dev-PLAT-13642-laravel12sanin/lara (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixzaxx44a/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devcodicastudio/sentry (PHP):
Affected version(s) =1.0.0Fix Suggestion:
Update to version no_fixlromanzini/laravel (PHP):
Affected version(s) >=dev-master <5.0.x-devFix Suggestion:
Update to version 5.0.x-devnosh2/nosh2 (PHP):
Affected version(s) >=dev-dependabot/npm_and_yarn/loader-utils-and-resolve-url-loader-1.4.2 <dev-dependabot/composer/guzzlehttp/guzzle-7.4.3Fix Suggestion:
Update to version dev-dependabot/composer/guzzlehttp/guzzle-7.4.3bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-kattrali/laravel56-upgrading <dev-laravel56-queue-testsFix Suggestion:
Update to version dev-laravel56-queue-testsgear/laravel-starter (PHP):
Affected version(s) =1.0.4Fix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) >=dev-release/2.7.0 <2.9.0Fix Suggestion:
Update to version 2.9.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-templates-update-20250124-172756 <dev-xFix Suggestion:
Update to version dev-xcongraph/cms (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0damnyan/laravel-with-useracl (PHP):
Affected version(s) =v1.0Fix Suggestion:
Update to version no_fixmacromindonline/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.7.x <0.8.0Fix Suggestion:
Update to version 0.8.0morenorafael/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devrsands2801/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.4.x <0.4.1Fix Suggestion:
Update to version 0.4.1george/laraadmin (PHP):
Affected version(s) >=1.0.2 <1.0.9Fix Suggestion:
Update to version 1.0.9autotim/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devdanielstonies/sentry-laravel (PHP):
Affected version(s) >=dev-feature/prevent-duplicates <0.1.0Fix Suggestion:
Update to version 0.1.0nbrabant/laraadmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9c57fr/l5 (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0sentry/sentry-laravel (PHP):
Affected version(s) >=0.x-dev <0.4.0Fix Suggestion:
Update to version 0.4.0googleads/googleads-php-lib (PHP):
Affected version(s) =37.0.0 <37.1.0Fix Suggestion:
Update to version 37.1.0aquaswim/laravel-with-voyager (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devevgenbel/platform (PHP):
Affected version(s) >=2.0.0 <2.0.1Fix Suggestion:
Update to version 2.0.1nirmit/laraadmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9shridharkaushik29/laravel-angular (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0macromindonline/sentry-laravel (PHP):
Affected version(s) >=dev-master <0.4.0Fix Suggestion:
Update to version 0.4.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-feature/user-ip-from-request <dev-first-class-callableFix Suggestion:
Update to version dev-first-class-callablewuhaohui/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0l7wahn/ladmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9itsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-master <0.1.0Fix Suggestion:
Update to version 0.1.0laraeast/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0neomerx/limoncello-collins (PHP):
Affected version(s) =dev-master <v3.0.0-beta-2Fix Suggestion:
Update to version v3.0.0-beta-2ricadesign/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-fix/fixture-memory <dev-fixture-cleanupFix Suggestion:
Update to version dev-fixture-cleanupsonarsoftware/customer_portal (PHP):
Affected version(s) =dev-clear-cache <dev-masterFix Suggestion:
Update to version dev-masterdarekmeco/platform (PHP):
Affected version(s) >=2.0.0 <=3.2.1Fix Suggestion:
Update to version no_fixbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.15.0 <v2.16.0Fix Suggestion:
Update to version v2.16.0vinkas/auth (PHP):
Affected version(s) =dev-laravel <dev-masterFix Suggestion:
Update to version dev-masterprwlr/laravue (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devgoogleads/googleads-php-lib (PHP):
Affected version(s) =38.0.0 <39.0.0Fix Suggestion:
Update to version 39.0.0miljan9602/bugsnag-laravel (PHP):
Affected version(s) >=dev-auto-on-session-tracking <v1.0.0Fix Suggestion:
Update to version v1.0.0rubenarakelyan/zomato-api-php (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0myckhel/laravel-example-template (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devbugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-guzzle-alias <dev-handle-oomsFix Suggestion:
Update to version dev-handle-oomsmacromindonline/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.5.x <0.6.0Fix Suggestion:
Update to version 0.6.0lv2technologies/laravel (PHP):
Affected version(s) >=v5.2.23 <v5.3.0Fix Suggestion:
Update to version v5.3.0ricadesign/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devzaxx44a/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.9.0 <v2.11.1Fix Suggestion:
Update to version v2.11.1alexkb/laravel-docker (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devimagina/cms-platform (PHP):
Affected version(s) =dev-pinturas-update <dev-upstream-masterFix Suggestion:
Update to version dev-upstream-mastermacromindonline/sentry-laravel (PHP):
Affected version(s) =dev-releases/0.4.x <0.4.1Fix Suggestion:
Update to version 0.4.1bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-release/v2.23.0 <dev-release/v2.25.1Fix Suggestion:
Update to version dev-release/v2.25.1inoplate/inoplate (PHP):
Affected version(s) >=dev-develop <=v0.1.1Fix Suggestion:
Update to version no_fixsentry/sentry-laravel (PHP):
Affected version(s) =dev-3.x-changelog <dev-3.x-tmpFix Suggestion:
Update to version dev-3.x-tmprubenarakelyan/zomato-api-php (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =dev-feature/add-sql-origin-to-query-tracing-span <dev-feature/contextFix Suggestion:
Update to version dev-feature/contextsentry/sentry-laravel (PHP):
Affected version(s) >=1.4.0 <1.5.0Fix Suggestion:
Update to version 1.5.0np21/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0furkankadioglu/modvelbase (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixmorenorafael/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0sentry/sentry-laravel (PHP):
Affected version(s) >=1.0.0-beta2 <1.0.0-beta5Fix Suggestion:
Update to version 1.0.0-beta5itsmill3rtime/sentry-laravel-5-7 (PHP):
Affected version(s) =dev-releases/0.9.x <0.9.1Fix Suggestion:
Update to version 0.9.1aerni/translator (PHP):
Affected version(s) =dev-dependabot/composer/league/flysystem-1.1.4 <dev-dependabot/npm_and_yarn/minimist-1.2.6Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/minimist-1.2.6bowero/laravel (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0sentry/sentry-laravel (PHP):
Affected version(s) =0.8.1 <0.8.2Fix Suggestion:
Update to version 0.8.2bugsnag/bugsnag-laravel (PHP):
Affected version(s) >=dev-laravel-vapor <dev-maze-runner-tidyFix Suggestion:
Update to version dev-maze-runner-tidygoogleads/googleads-php-lib (PHP):
Affected version(s) >=41.0.0 <46.1.0Fix Suggestion:
Update to version 46.1.0nencerpackagist/asgardcms (PHP):
Affected version(s) =2.0Fix Suggestion:
Update to version no_fixfolklore/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devsentry/sentry-laravel (PHP):
Affected version(s) =dev-feature/laravel-octane-support <dev-feature/normalize-queue-nameFix Suggestion:
Update to version dev-feature/normalize-queue-namepolly3d/laravel-kit (PHP):
Affected version(s) =dev-masterFix Suggestion:
Update to version no_fixcrowdtruth/crowdtruth (PHP):
Affected version(s) =dev-laravel <dev-lukaszFix Suggestion:
Update to version dev-lukaszbugsnag/bugsnag-laravel (PHP):
Affected version(s) =v2.12.0 <v2.13.0Fix Suggestion:
Update to version v2.13.0sentry/sentry-laravel (PHP):
Affected version(s) =2.12.0 <dev-release/2.12.0Fix Suggestion:
Update to version dev-release/2.12.0dwij/laraadmin (PHP):
Affected version(s) >=1.0.1 <1.0.9Fix Suggestion:
Update to version 1.0.9musoftware/logger-laravel (PHP):
Affected version(s) >=0.1.0 <3.0.0Fix Suggestion:
Update to version 3.0.0sentry/sentry-laravel (PHP):
Affected version(s) =dev-queue-tracing-integration <dev-readme-contributing-doc-improvementsFix Suggestion:
Update to version dev-readme-contributing-doc-improvementsbugsnag/bugsnag-laravel (PHP):
Affected version(s) >=v2.4.0 <v2.7.0Fix Suggestion:
Update to version v2.7.0asgardcms/platform (PHP):
Affected version(s) >=2.0.0 <dev-dependabot/npm_and_yarn/Themes/Flatly/debug-and-browser-sync-and-compression-and-express-and-serve-index-2.6.9Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/Themes/Flatly/debug-and-browser-sync-and-compression-and-express-and-serve-index-2.6.9ymonkey/laravel (PHP):
Affected version(s) >=v5.2.23 <5.3.x-devFix Suggestion:
Update to version 5.3.x-devaquaswim/laravel-with-voyager (PHP):
Affected version(s) =5.2.x-dev <v5.2.0Fix Suggestion:
Update to version v5.2.0bugsnag/bugsnag-laravel (PHP):
Affected version(s) =dev-fix-unit-tests <dev-fix-unstable-testsFix Suggestion:
Update to version dev-fix-unstable-testsswisnl/game-of-tests-laravel-demo (PHP):
Affected version(s) >=1.0.0 <dev-dependabot/npm_and_yarn/path-parse-1.0.7Fix Suggestion:
Update to version dev-dependabot/npm_and_yarn/path-parse-1.0.7Related Resources (5)
Do you need more information?
Contact UsCVSS v4
Base Score:
5.1
Attack Vector
NETWORK
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
PASSIVE
Vulnerable System Confidentiality
LOW
Vulnerable System Integrity
LOW
Vulnerable System Availability
NONE
Subsequent System Confidentiality
LOW
Subsequent System Integrity
LOW
Subsequent System Availability
NONE
CVSS v3
Base Score:
5.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE
Weakness Type (CWE)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS
Base Score:
0.57