Skip to content
Sign in
6.9 Medium

CVE-2025-27515 Laravel is a web application framework

Description

Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.

Affected products and versions

Product Affected versions Fixed in
framework 12.0 12.0.0 → < 12.1.1 12.1.1
framework 11.44 earliest → < 11.44.1 11.44.1

Other CVEs of framework

The 9 CVEs of framework →
CVE-2026-114509 Laravel is a web application framework 9.2 Critical CVE-2026-114508 Laravel is a web application framework 6.5 Medium CVE-2026-102279 Laravel is a web application framework 3.1 Low CVE-2026-48019 Laravel is a web application framework 8.9 High
Track this CVE