Threats tagged 'ghsa-3jwc-jjcp-mq77'

A vulnerability in the MongoDB integration for Laravel allows improper neutralization of special elements in polymorphic relation handling. This flaw can cause a caller-supplied relation identifier to be treated as a query condition instead of a literal identifier. An authenticated user able to influence a stored relation identifier may cause the application to return unintended documents. The vulnerability has a CVSS score of 6.5, indicating high severity.