{"uuid": "d1a252bc-f5eb-4af7-82b9-be63037e84f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-15133", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/laravel_token_unserialize_exec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"St\\u00e5le Pettersen\", \"aushack \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in the PHP Laravel Framework for versions 5.5.40, 5.6.x <= 5.6.29.\\n          Remote Command Execution is possible via a correctly formatted HTTP X-XSRF-TOKEN header, due to\\n          an insecure unserialize call of the decrypt method in Illuminate/Encryption/Encrypter.php.\\n          Authentication is not required, however exploitation requires knowledge of the Laravel APP_KEY.\\n          Similar vulnerabilities appear to exist within Laravel cookie tokens based on the code fix.\\n          In some cases the APP_KEY is leaked which allows for discovery and exploitation.\", \"disclosure_date\": \"2018-08-07\", \"fullname\": \"exploit/unix/http/laravel_token_unserialize_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:31 +0000\", \"name\": \"PHP Laravel Framework token Unserialize Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/http/laravel_token_unserialize_exec.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/http/laravel_token_unserialize_exec\", \"references\": [\"CVE-2018-15133\", \"CVE-2017-16894\", \"URL-https://github.com/kozmic/laravel-poc-CVE-2018-15133\", \"URL-https://laravel.com/docs/5.6/upgrade#upgrade-5.6.30\", \"URL-https://github.com/laravel/framework/pull/25121/commits/d84cf988ed5d4661a4bf1fdcb08f5073835083a0\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:36.538782Z"}