CVE-2018-8947

PoC —

CVSS 3.0

7.5 high

EPSS

11%p96

Published

Mar 25, 2018 (Mar 25, 2018)

Modified

Jun 17, 2026

Description

rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request.

Vendors: laravel log viewer project
Products: laravel log viewer
Weakness: CWE-312
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (11.0%)

In the news0 stories

No ingested article mentions this CVE yet.