PT-2017-18834
CVE-2017-9303
·
Published
2017-05-29
·
Updated
2022-05-17
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Laravel versions 5.4.x before 5.4.22
Description
The issue makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host, due to the improper constraint of the host portion of a password-reset URL.
Recommendations
For versions 5.4.x before 5.4.22, update to version 5.4.22 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾