← Database

CVE-2025-27515

CRITICAL CVSS: 9.8 Published: 2025-03-05 Modified: 2026-06-17

Description

Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.

Affected Platforms

Laravel Framework

Weakness Type

CWE-155

References