CVE-2020-24940

score

<0.1

cvss

7.5

epss

1.2%

published

2020-09-04

kev added

—

first seen

2026-10-21

Laravel before 6.18.34 and 7.x before 7.23.2 contain an issue where unvalidated values are saved to the database due to table names being stripped during mass assignment, letting attackers inject malicious data, exploit requires access to the application with database write permissions.