Laravel Mass Assignment Vulnerability Leading to Unvalidated Database Entries

A vulnerability exists in Laravel versions prior to 6.18.34 and in the 7.x branch prior to 7.23.2, allowing unvalidated data to be saved to the database under certain conditions. This issue arises during mass assignment when table names are automatically removed, creating a potential for unexpected values to be recorded without proper validation.

Impact

Exploitation of this vulnerability could result in the database being populated with unvalidated and potentially harmful data.

Remediation

Users can upgrade to Laravel 6.18.34 or 7.23.2 to address this vulnerability.