CVE-2018-15133 is a remote code execution vulnerability affecting Laravel Framework versions through 5.5.40 and 5.6.x through 5.6.29. It stems from an insecure deserialization of a potentially untrusted X-XSRF-TOKEN value, specifically within the decrypt method. Exploitation requires knowledge of the application key, which is a high prerequisite, but the impact is severe, allowing for full compromise of confidentiality, integrity, and availability. This vulnerability is actively exploited, has a Metasploit module available, and has garnered significant community and media attention, including its association with the Androxgh0st botnet.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 5.5.40CPE matchmatch criteria | cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:* | ||
>= 5.6.0, <= 5.6.29CPE matchmatch criteria | cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.