Exploitation Summary
CVE-2024-29291 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including Huseein Amer.
AI-analyzed exploit summary This exploit demonstrates an information leakage vulnerability in Laravel Framework versions 8.* to 11.* where database credentials are exposed in the log file. The PoC instructs users to navigate to the log file and search for specific strings to extract credentials.
Description
An issue in Laravel Framework 8 through 11 might allow a remote attacker to discover database credentials in storage/logs/laravel.log. NOTE: this is disputed by multiple third parties because the owner of a Laravel Framework installation can choose to have debugging logs, but needs to set the access control appropriately for the type of data that may be logged.
Exploits (1)
This exploit demonstrates an information leakage vulnerability in Laravel Framework versions 8.* to 11.* where database credentials are exposed in the log file. The PoC instructs users to navigate to the log file and search for specific strings to extract credentials.