News for hackers. Stuff that matters.

A comment on Laravel cookie forgery, decryption, and RCE.

Re:Laravel cookie forgery, decryption, and RCE by laravel on Sunday April 20, 2014 @04:43PM (#7618414)
This bug was publicly disclosed and fixed over a year ago.
[ Parent | on HN ]
Re:Laravel cookie forgery, decryption, and RCE by danpalmer on Sunday April 20, 2014 @05:16PM (#7618514)
Was that disclosed by MWR? It might just be delayed publication on their blog.
[ Parent | on HN ]
Re:Laravel cookie forgery, decryption, and RCE by laravel on Sunday April 20, 2014 @05:17PM (#7618516)
No, Jon Cave first disclosed it on his personal blog.
[ Parent | on HN ]
Re:Laravel cookie forgery, decryption, and RCE by iWKtMK on Sunday April 20, 2014 @05:26PM (#7618547)
I published details of a separate issue on my personal blog (linked in the first paragraph of this article). This is delayed publication of a second set of issues.
[ Parent | on HN ]