CVE-2021-21979

CVE-2021-21979 affects Bitnami Laravel containers prior to specific versions, where a fixed and publicly known APP_KEY is generated during image build, rather than being randomly generated per installation. This critical security flaw allows attackers to craft malicious cookie values, potentially leading to PHP object serialization/unserialization vulnerabilities and arbitrary code execution. Rated as High severity (CVSS 7.3), the vulnerability is easily exploitable over the network with low attack complexity and no user interaction, impacting confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.