{"id":"CVE-2020-24941","published":"2020-09-04T01:27:50Z","modified":"2024-08-04T15:26:09Z","title":"An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0","vendor":null,"product":null,"tier":"tail","description":{"text":"An issue was discovered in Laravel before 6.18.35 and 7.x before 7.24.0. The $guarded property is mishandled in some situations involving requests with JSON column nesting expressions.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.0109,"percentile":0.65246,"provenance":"source"},"cwes":[],"references":[{"url":"https://blog.laravel.com/security-release-laravel-61835-7240","tags":["x_refsource_MISC"]}],"priority":{"score":13.0,"factors":[{"name":"EPSS percentile","points":13.05}]},"affected":[{"ecosystem":"Packagist","package":"laravel/framework","vulnerableRanges":["<6.18.35",">=7.0.0, <7.24.0"],"patched":["6.18.35","7.24.0"],"from":["GHSA-w68r-5p45-5rqp"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-1211","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2018-15133","published":"2018-08-09","fixed":"5.6.30","kev":true},{"cve":"CVE-2020-19316","published":"2021-12-20","fixed":"5.8.17","kev":false},{"cve":"CVE-2019-9081","published":"2019-02-24","fixed":"6.20.44","kev":false},{"cve":"CVE-2020-24941","published":"2020-09-04","fixed":"7.24.0","kev":false},{"cve":"CVE-2021-21263","published":"2021-01-19","fixed":"8.22.1","kev":false,"link":{"from":"CVE-2020-24941","to":"CVE-2021-21263","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:laravel/framework","fromFixed":"6.18.35","toFixed":"6.20.11","daysApart":137},{"kind":"version-step","provenance":"source","package":"Packagist:laravel/framework","fromFixed":"7.24.0","toFixed":"7.30.2","daysApart":137}]}},{"cve":"CVE-2021-43808","published":"2021-12-07","fixed":"8.75.0","kev":false},{"cve":"CVE-2024-52301","published":"2024-11-12","fixed":"11.31.0","kev":false}],"package":"Packagist:laravel/framework"}}