Packagist/filament/actions CVE-2024-51758: low 2.4, EPSS 0.56%
Filament has exported files stored in default (`public`) filesystem if not reconfigured
Action: Upgrade filament/actions to 3.2.123 or later.
composer require filament/actions:3.2.123Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.2.0 | 3.2.123 | - |
Fixed versions
| 3.2.123 |
Sources
- osv: GHSA-4hxw-gc2q-f6f3
- https://github.com/filamentphp/filament/security/advisories/GHSA-4hxw-gc2q-f6f3
- https://nvd.nist.gov/vuln/detail/CVE-2024-51758
- https://github.com/filamentphp/filament/commit/19f5347f0e17d9f4eb515e24ea5632031c6829df
- https://filamentphp.com/docs/3.x/actions/prebuilt-actions/export#customizing-the-storage-disk
- https://github.com/filamentphp/filament
- https://github.com/filamentphp/filament/blob/3.x/packages/actions/src/Exports/Exporter.php#L144-L153
CVE-2024-51758 · published · modified · JSON