CVE-2017-14775

score

<0.1

cvss

5.9

epss

1.2%

published

2017-09-28

kev added

—

first seen

2026-10-21

Laravel before 5.5.10 contains a token verification issue caused by DatabaseUserProvider not performing constant-time comparison of remember_me tokens, letting attackers potentially perform timing attacks, exploit requires attacker to control token or observe response times.