> CVE-2025-27517

« BACK_TO_HOME
PUBLISHED
2025-03-05 20:16
MODIFIED
2025-03-05 20:16
EPSS (Prob. Exploit)
0.62%
Top 50.1%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-11-08 GITHUB 🔗 2026-11-04 OSV 🔗 2026-11-08

> DESCRIPTION

Volt is an elegantly crafted functional API for Livewire. Malicious, user-crafted request payloads could potentially lead to remote code execution within Volt components. This vulnerability is fixed in 1.7.0.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-v69f-5jxm-hwvv CRITICAL

Volt Allows RCE Via User-Crafted Requests

AFFECTED PACKAGES:
COMPOSER / livewire/volt
< 1.7.0
Fixed in: 1.7.0

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

Volt Allows RCE Via User-Crafted Requests

AFFECTED PACKAGES:
Unknown / Unknown
25 versions affected
ALIASES:
GHSA-v69f-5jxm-hwvv

> HISTORIQUE DES MODIFICATIONS

Première apparition
05/03/2025 20:16
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:01
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME