Packagist/lara-zeus/artemis CVE-2024-47817: medium 6.1, EPSS 0.40%
Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS
Action: Upgrade lara-zeus/artemis to 1.0.7 or later.
composer require lara-zeus/artemis:1.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.7 | - |
Fixed versions
| 1.0.7 |
Sources
- osv: GHSA-c6cw-g7fc-4gwc#Packagist/lara-zeus/artemis
- https://github.com/lara-zeus/dynamic-dashboard/security/advisories/GHSA-c6cw-g7fc-4gwc
- https://nvd.nist.gov/vuln/detail/CVE-2024-47817
- https://github.com/lara-zeus/artemis/commit/3a3f9dd8a706af569c5581b20dcfeff91a43b9d9
- https://github.com/lara-zeus/artemis/commit/4636f58628d20d3e78ea8514406bd7da94997f2c
- https://github.com/lara-zeus/dynamic-dashboard/commit/adfb4b1cdfdaa01299631f0e569ce201a7cc545a
- https://github.com/lara-zeus/dynamic-dashboard
CVE-2024-47817 · published · modified · JSON