CVE-2017-9303 Laravel does not properly constrain the host portion of a password-reset URL
MediumCVSS 6.1
EPSS 0.96%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Laravel 5.4.x before 5.4.22 does not properly constrain the host portion of a password-reset URL, which makes it easier for remote attackers to conduct phishing attacks by specifying an attacker-controlled host.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| laravel/laravel(Packagist) | >= 5.4.0, < 5.4.22 | 5.4.22 |
| laravel/laravel(Packagist) | = v5.4.0 | No fix listed |
| laravel/laravel(Packagist) | = v5.4.15 | No fix listed |
| laravel/laravel(Packagist) | = v5.4.16 | No fix listed |
| laravel/laravel(Packagist) | = v5.4.19 | No fix listed |
| laravel/laravel(Packagist) | = v5.4.21 | No fix listed |
| laravel/laravel(Packagist) | = v5.4.3 | No fix listed |
| laravel/laravel(Packagist) | = v5.4.9 | No fix listed |
| illuminate/auth(Packagist) | >= 5.3.0, <= 5.3.31 | No fix listed |
| illuminate/auth(Packagist) | = v5.3.0 | No fix listed |
| illuminate/auth(Packagist) | = v5.3.16 | No fix listed |
| illuminate/auth(Packagist) | = v5.3.23 | No fix listed |
| illuminate/auth(Packagist) | = v5.3.4 | No fix listed |
| illuminate/auth(Packagist) | >= 5.4.0, < 5.4.22 | 5.4.22 |
| illuminate/auth(Packagist) | = v5.4.0 | No fix listed |
| illuminate/auth(Packagist) | = v5.4.13 | No fix listed |
| illuminate/auth(Packagist) | = v5.4.17 | No fix listed |
| illuminate/auth(Packagist) | = v5.4.19 | No fix listed |
| illuminate/auth(Packagist) | = v5.4.9 | No fix listed |
| Laravel Framework(Packagist) | >= 5.3.0, <= 5.3.31 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.0 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.1 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.10 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.11 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.12 | No fix listed |
Show 51 more
| Product | Affected versions | Fixed in |
|---|---|---|
| Laravel Framework(Packagist) | = v5.3.13 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.14 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.15 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.16 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.17 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.18 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.19 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.2 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.20 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.21 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.22 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.23 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.24 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.25 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.26 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.27 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.28 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.29 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.3 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.30 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.31 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.4 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.5 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.6 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.7 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.8 | No fix listed |
| Laravel Framework(Packagist) | = v5.3.9 | No fix listed |
| Laravel Framework(Packagist) | >= 5.4.0, < 5.4.22 | 5.4.22 |
| Laravel Framework(Packagist) | = v5.4.0 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.1 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.10 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.11 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.12 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.13 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.14 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.15 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.16 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.17 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.18 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.19 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.2 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.20 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.21 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.3 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.4 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.5 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.6 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.7 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.8 | No fix listed |
| Laravel Framework(Packagist) | = v5.4.9 | No fix listed |
| laravel/laravel | = 5.4.0 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com exploit
- github.com exploit
- laravel-news.com vendor-advisory
- laravel.com
- web.archive.org
- 98776 third-party-advisory vdb-entry
- Debian Security Tracker CVE-2017-9303 vendor-advisory
- github.com