An issue was discovered in Laravel before 6.18.34 and 7.x before 7.23.2. Unvalidated values are saved to the database in some situations in which table names are stripped during a mass assignment.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| illuminate/database(Packagist) | 5.5.0 | N/A | N/A |
| illuminate/database(Packagist) | 6.0.0 | 6.18.34 | N/A |
| illuminate/database(Packagist) | 7.0.0 | 7.23.2 | N/A |
CVSS Metrics
