CVE-2020-36950CWE-770

Laravel Nova 3.7.0 - 'range' DoS

High · published January 27, 2026

CVSS v4.0
8.7
EPSS
0%
Percentile
29.4
In the wild
Unconfirmed
What it is

Laravel Nova 3.7.0 contains a denial of service vulnerability that allows authenticated users to crash the application by manipulating the 'range' parameter. Attackers can send simultaneous requests with an extremely high range value to overwhelm and crash the server.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00367 · 29.4th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-27T15:23Z
EPSS history
Timeline
  • 27 JAN 15:23Z
    Laravel Nova 3.7.0 - 'range' DoS
    cvelistv5