Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.3

nasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy

CVE-2024-6056 · published 2 years ago
Summary

A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response discre...

What to do
  • Update nasirkhan laravel_starter to version 11.8.0 or later.
Affected software
VendorProductAffected versions
nasirkhan laravel_starter < 11.8.0
cpe:2.3:a:nasirkhan:laravel_starter:*:*:*:*:*:*:*:*
Original advisory text
nasirkhan Laravel Starter Password Reset forgot-password observable response discrepancy
A vulnerability was found in nasirkhan Laravel Starter up to 11.8.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /forgot-password of the component Password Reset Handler. The manipulation of the argument Email leads to observable response discrepancy. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-268784. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.3 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-204Observable Response Discrepancy
CWE-203Observable Discrepancy
Timeline
Published17 Jun 2024
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2024-6056 · NVD
CVE-2024-6056 · OSV
Track software like this
Free during beta