CVE-2022-2886

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as critical, was found in Laravel 5.1. Affected is an unknown function. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-206688.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

Vendor	Product	Versions
unspecified	Laravel	5.1

References

https://github.com/beicheng-maker/vulns/issues/3Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?id.206688Third Party Advisory
https://github.com/beicheng-maker/vulns/issues/3Exploit, Issue Tracking, Third Party Advisory
https://vuldb.com/?id.206688Third Party Advisory

Timeline

Published: Aug 19, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-288605.9An authentication downgrade in the server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smar CVE-2022-288615.9The server in Citilog 8.0 allows an attacker (in a man in the middle position between the server and its smart camera Axis M1125) to see FTP CVE-2022-288629.8In Archibus Web Central before 26.2, multiple SQL Injection vulnerabilities occur in dwr/call/plaincall/workflow.runWorkflowRule.dwr. Throug CVE-2022-288638.8An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and a CVE-2022-288648.8An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the CVE-2022-288655.4An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an CVE-2022-288668.8Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI < R18 Firmware v4.13.00. It does not properly validate request CVE-2022-288675.4An issue was discovered in Nokia NetAct 22 through the Administration of Measurements website section. A malicious user can edit or add the CVE-2022-288684.3An Address bar spoofing vulnerability was discovered in Safe Browser for Android. When user clicks on a specially crafted malicious webpage/CVE-2022-288694.3A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar CVE-2022-28874.8The WP Server Health Stats WordPress plugin before 1.7.0 does not escape some of its settings, which could allow high privilege users to per CVE-2022-288704.3A vulnerability affecting F-Secure SAFE browser was discovered. A maliciously crafted website could make a phishing attack with address bar