Packagist/ibexa/admin-ui CVE-2024-53864: medium 5.3, EPSS 0.53%
Ibexa Admin UI vulnerable to Cross-site Scripting in a field that is used in the Content name pattern
Action: Upgrade ibexa/admin-ui to 4.6.14 or later.
composer require ibexa/admin-ui:4.6.14Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.0 | 4.6.14 | - |
Fixed versions
| 4.6.14 |
Sources
- osv: GHSA-8w3p-gf85-qcch
- nvd: CVE-2024-53864
- https://github.com/ibexa/admin-ui/security/advisories/GHSA-8w3p-gf85-qcch
- https://github.com/ibexa/admin-ui/commit/8ec824a8cf06c566ed88e4c21cc66f7ed42649fc
- https://developers.ibexa.co/security-advisories/ibexa-sa-2024-006-vulnerabilities-in-content-name-pattern-commerce-shop-and-varnish-vhost-templates
- https://doc.ibexa.co/en/latest/update_and_migration/from_4.6/update_from_4.6/#v4614
- https://github.com/ibexa/admin-ui
CVE-2024-53864 · published · modified · JSON