CVE-2021-21263

score

<0.1

cvss

7.2

epss

1.6%

published

2021-01-19

kev added

—

first seen

2026-10-21

Laravel versions before 6.20.11, 7.30.2, and 8.22.1 contain a query binding exploitation caused by improper validation of array inputs in query fields, letting attackers manipulate query results, exploit requires crafted request with array input.