Nova Toggle 5
Monthly
Unauthorized boolean field manipulation in nova-toggle-5 (versions prior to 1.3.0) allows any user authenticated on the shared Laravel web guard to call the Nova toggle endpoint and flip boolean columns on any model - even without Nova admin access. The endpoint's attribute parameter accepted arbitrary column names, bypassing field-level exposure controls and permitting writes to columns never declared as Toggle fields. No public exploit has been identified (EPSS 0.03%, SSVC exploitation: none), but the integrity impact is rated High because critical boolean flags such as is_admin or is_active on any resource are writable.
Unauthorized boolean field manipulation in nova-toggle-5 (versions prior to 1.3.0) allows any user authenticated on the shared Laravel web guard to call the Nova toggle endpoint and flip boolean columns on any model - even without Nova admin access. The endpoint's attribute parameter accepted arbitrary column names, bypassing field-level exposure controls and permitting writes to columns never declared as Toggle fields. No public exploit has been identified (EPSS 0.03%, SSVC exploitation: none), but the integrity impact is rated High because critical boolean flags such as is_admin or is_active on any resource are writable.