Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-27515

Laravel has a File Validation Bypass

Description

Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

laravel framework

  • >= 12.0.0, < 12.1.1affected
  • < 11.44.1affected

References