漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Laravel Reverb has Missing API Signature Verification
Vulnerability Description
Laravel Reverb provides a real-time WebSocket communication backend for Laravel applications. Prior to 1.4.0, there is an issue where verification signatures for requests sent to Reverb's Pusher-compatible API were not being verified. This API is used in scenarios such as broadcasting a message from a backend service or for obtaining statistical information (such as number of connections) about a given channel. This issue only affects the Pusher-compatible API endpoints and not the WebSocket connections themselves. In order to exploit this vulnerability, the application ID which, should never be exposed, would need to be known by an attacker. This vulnerability is fixed in 1.4.0.
CVSS Information
N/A
Vulnerability Type
密码学签名的验证不恰当
Vulnerability Title
Laravel Reverb 数据伪造问题漏洞
Vulnerability Description
Laravel Reverb是The Laravel Framework开源的一个库。为Laravel应用程序带来了实时WebSocket通信。 Laravel Reverb 1.4.0之前版本存在数据伪造问题漏洞，该漏洞源于对发送到Reverb的Pusher兼容API的请求的验证签名未进行验证。
CVSS Information
N/A
Vulnerability Type
N/A