← Database

CVE-2021-43996

CRITICAL CVSS: 9.8 Published: 2021-11-17 Modified: 2026-06-17

Description

The Ignition component before 1.16.15, and 2.0.x before 2.0.6, for Laravel has a "fix variable names" feature that can lead to incorrect access control.

Affected Platforms

Facade Ignition

Weakness Type

NVD-CWE-Other

References