{"id":"CVE-2021-43996","published":"2021-11-17T19:17:55Z","modified":"2024-08-04T04:10:16Z","title":"The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a \"fix variable names\" feature that can…","vendor":null,"product":null,"tier":"tail","description":{"text":"The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a \"fix variable names\" feature that can lead to incorrect access control.","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.01725,"percentile":0.77457,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/facade/ignition/compare/1.16.14...1.16.15","tags":["x_refsource_MISC"]},{"url":"https://github.com/facade/ignition/compare/2.0.5...2.0.6","tags":["x_refsource_MISC"]},{"url":"https://github.com/facade/ignition/pull/285","tags":["x_refsource_MISC"]}],"priority":{"score":15.5,"factors":[{"name":"EPSS percentile","points":15.49}]},"affected":[{"ecosystem":"Packagist","package":"facade/ignition","vulnerableRanges":["<1.16.15",">=2.0.0, <2.0.6"],"patched":["1.16.15","2.0.6"],"from":["GHSA-vhrp-8qx4-vr6c"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-2398","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2020-13909","published":"2020-06-07","fixed":"2.0.5","kev":false,"link":{"from":"CVE-2020-13909","to":"CVE-2021-43996","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:facade/ignition","fromFixed":"2.0.5","toFixed":"2.0.6","daysApart":528},{"kind":"similar","provenance":"machine","score":0.39,"basis":"same package + description similarity"}]}},{"cve":"CVE-2021-43996","published":"2021-11-17","fixed":"2.0.6","kev":false},{"cve":"CVE-2021-3129","published":"2021-01-12","fixed":"2.5.2","kev":true,"link":{"from":"CVE-2021-3129","to":"CVE-2021-43996","relation":"successor","confidence":"medium","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:facade/ignition","fromFixed":"1.16.14","toFixed":"1.16.15","daysApart":309},{"kind":"similar","provenance":"machine","score":0.46,"basis":"same package + description similarity"}]}}],"package":"Packagist:facade/ignition"}}