CVE-2025-27515 — Laravel has a File Validation Bypass
Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially by…
Published: 2025-03-05 · CVSS: 6.9 · CVSS 4.0
Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7