VULNERABILITY INTELLIGENCE

CVE-2021-28254

CVSS score9.8 CRITICAL

EPSS probability1.32%

CISA KEVNot currently listed

Published2023-04-19

Last modified2026-06-17

Description

A deserialization vulnerability in the destruct() function of Laravel v8.5.9 allows attackers to execute arbitrary commands.