Packagist/exceedone/exment CVE-2022-38080: medium 5.4, EPSS 0.93%
exceedone/exment and exceedone/laravel-admin Cross-site Scripting vulnerability
Action: Upgrade exceedone/exment to 4.4.3 or later.
composer require exceedone/exment:5.0.3composer require exceedone/exment:4.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.3 | - |
| 0 | 4.4.3 | - |
Fixed versions
| 5.0.3 | 4.4.3 |
Sources
- osv: GHSA-8629-83m5-rj75
- https://nvd.nist.gov/vuln/detail/CVE-2022-38080
- https://exment.net/docs/#/release_note?id=v503-20220817
- https://exment.net/docs/#/weakness/20220817
- https://github.com/exceedone/exment
- https://jvn.jp/en/jp/JVN46239102/index.html
CVE-2022-38080 · published · modified · JSON