← All advisories

Unrated severityNVD Advisory· Published Apr 18, 2023· Updated Mar 5, 2025

CVE-2021-28254

CVE-2021-28254

Description

A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Laravel/Laravelcpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 8.5.9
osv-coords
pkg:bitnami/laravel
Range: >= 8.5.9, < 8.5.10

Patches

Vulnerability mechanics

References

1

s1mple-top.github.io/2021/03/09/Laravel8-new-pop-chain-mining-process/mitre

News mentions

0

No linked articles in our index yet.