laravel-log-viewer
laravel-log-viewer copied to clipboard
:dromedary_camel: Laravel log viewer
When I click on "delete file," I receive an error message in my Lumen project. I am using Laravel 8.
## 📛 Insecure Deserialization in Laravel Log Viewer leading to RCE ### Summary An **Insecure Deserialization** vulnerability exists in the Laravel Log Viewer package, specifically at the endpoint `GET /logs`,...
### Description Unauthorized user can access Laravel log viewer by rap2hpoutre and use download function to download any file with laravel permission, by base64 encode the wanted file. Base64 value...