Packagist/lara-zeus/dynamic-dashboard CVE-2024-47817: medium 6.1, EPSS 0.40%
Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS
Action: Upgrade lara-zeus/dynamic-dashboard to 3.0.2 or later.
composer require lara-zeus/dynamic-dashboard:3.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.0.2 | - |
Fixed versions
| 3.0.2 |
Sources
- osv: GHSA-c6cw-g7fc-4gwc
- https://github.com/lara-zeus/dynamic-dashboard/security/advisories/GHSA-c6cw-g7fc-4gwc
- https://nvd.nist.gov/vuln/detail/CVE-2024-47817
- https://github.com/lara-zeus/artemis/commit/3a3f9dd8a706af569c5581b20dcfeff91a43b9d9
- https://github.com/lara-zeus/artemis/commit/4636f58628d20d3e78ea8514406bd7da94997f2c
- https://github.com/lara-zeus/dynamic-dashboard/commit/adfb4b1cdfdaa01299631f0e569ce201a7cc545a
- https://github.com/lara-zeus/dynamic-dashboard
CVE-2024-47817 · published · modified · JSON