Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:PHP:LARAVEL-LOG-LFD

Severity

Major

Recommended

No

Category

HTTP

Keywords

Laravel Log Viewer Local File Download

Release Date

2019/09/17

Update Number

3208

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: Laravel Log Viewer Local File Download


This signature detects attempts to exploit a known vulnerability against Laravel Log Viewer. A successful attack can lead to Local File Download.

Extended Description

rap2hpoutre Laravel Log Viewer before v0.13.0 relies on Base64 encoding for l, dl, and del requests, which makes it easier for remote attackers to bypass intended access restrictions, as demonstrated by reading arbitrary files via a dl request.

Affected Products

  • Laravel_log_viewer_project laravel_log_viewer 0.1.0
  • Laravel_log_viewer_project laravel_log_viewer 0.10.0
  • Laravel_log_viewer_project laravel_log_viewer 0.10.1
  • Laravel_log_viewer_project laravel_log_viewer 0.10.2
  • Laravel_log_viewer_project laravel_log_viewer 0.10.3
  • Laravel_log_viewer_project laravel_log_viewer 0.10.4
  • Laravel_log_viewer_project laravel_log_viewer 0.1.1
  • Laravel_log_viewer_project laravel_log_viewer 0.1.10
  • Laravel_log_viewer_project laravel_log_viewer 0.11.0
  • Laravel_log_viewer_project laravel_log_viewer 0.11.1
  • Laravel_log_viewer_project laravel_log_viewer 0.11.2
  • Laravel_log_viewer_project laravel_log_viewer 0.1.2
  • Laravel_log_viewer_project laravel_log_viewer 0.12.0
  • Laravel_log_viewer_project laravel_log_viewer 0.1.3
  • Laravel_log_viewer_project laravel_log_viewer 0.1.4
  • Laravel_log_viewer_project laravel_log_viewer 0.1.5
  • Laravel_log_viewer_project laravel_log_viewer 0.1.6
  • Laravel_log_viewer_project laravel_log_viewer 0.1.7
  • Laravel_log_viewer_project laravel_log_viewer 0.1.8
  • Laravel_log_viewer_project laravel_log_viewer 0.1.9
  • Laravel_log_viewer_project laravel_log_viewer 0.2.0
  • Laravel_log_viewer_project laravel_log_viewer 0.2.1
  • Laravel_log_viewer_project laravel_log_viewer 0.2.2
  • Laravel_log_viewer_project laravel_log_viewer 0.2.3
  • Laravel_log_viewer_project laravel_log_viewer 0.2.4
  • Laravel_log_viewer_project laravel_log_viewer 0.2.5
  • Laravel_log_viewer_project laravel_log_viewer 0.2.6
  • Laravel_log_viewer_project laravel_log_viewer 0.2.7
  • Laravel_log_viewer_project laravel_log_viewer 0.2.8
  • Laravel_log_viewer_project laravel_log_viewer 0.3.0
  • Laravel_log_viewer_project laravel_log_viewer 0.4.0
  • Laravel_log_viewer_project laravel_log_viewer 0.4.1
  • Laravel_log_viewer_project laravel_log_viewer 0.4.2
  • Laravel_log_viewer_project laravel_log_viewer 0.4.3
  • Laravel_log_viewer_project laravel_log_viewer 0.5.0
  • Laravel_log_viewer_project laravel_log_viewer 0.5.1
  • Laravel_log_viewer_project laravel_log_viewer 0.5.2
  • Laravel_log_viewer_project laravel_log_viewer 0.5.3
  • Laravel_log_viewer_project laravel_log_viewer 0.6.0
  • Laravel_log_viewer_project laravel_log_viewer 0.6.1
  • Laravel_log_viewer_project laravel_log_viewer 0.7.0
  • Laravel_log_viewer_project laravel_log_viewer 0.7.1
  • Laravel_log_viewer_project laravel_log_viewer 0.8.0
  • Laravel_log_viewer_project laravel_log_viewer 0.8.1
  • Laravel_log_viewer_project laravel_log_viewer 0.9.0

References

  • CVE: CVE-2018-8947
  • URL: https://github.com/rap2hpoutre/laravel-log-viewer/commit/cda89c06dc5331d06fab863d7cb1c4047ad68357

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out