Packagist/exceedone/laravel-admin CVE-2022-38080: medium 5.4, EPSS 0.93%
exceedone/exment and exceedone/laravel-admin Cross-site Scripting vulnerability
Action: Upgrade exceedone/laravel-admin to 2.2.3 or later.
composer require exceedone/laravel-admin:2.2.3composer require exceedone/laravel-admin:3.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.2.3 | - |
| 3.0.0 | 3.0.1 | - |
Fixed versions
| 2.2.3 | 3.0.1 |
Sources
- osv: GHSA-8629-83m5-rj75#Packagist/exceedone/laravel-admin
- https://nvd.nist.gov/vuln/detail/CVE-2022-38080
- https://exment.net/docs/#/release_note?id=v503-20220817
- https://exment.net/docs/#/weakness/20220817
- https://github.com/exceedone/exment
- https://jvn.jp/en/jp/JVN46239102/index.html
CVE-2022-38080 · published · modified · JSON