POP Gadget using function injection in RequiredIf

Jun 12, 2021 By Vikrant Singh Chauhan

Reported and fixed a vulnerability in Laravel where Illuminate\Validation\Rules\RequiredIf could be used as a gadget chain for deserialization vulnerabilities.

References