Name of the Vulnerable Software and Affected Versions: Laravel Core versions prior to 0.3.7-beta

Description: The issue involves the leaking of the password field during the serialization of the User model. Although the password is in encrypted form, it can be printed if the User model is requested in JSON or array form.

Recommendations: For versions prior to 0.3.7-beta, add the 'password' field to the Users model file in the hidden array by modifying the $hidden property in the User model to include 'password', as shown in the example:

protected $hidden = [
  'remember token',
  'password',
];

Alternatively, update to version 0.3.7-beta or later to resolve the issue.