Packagist/exceedone/exment CVE-2022-37333: high 8.8, EPSS 1.44%
exceedone/exment and exceedone/laravel-admin SQL Injection vulnerability
Action: Upgrade exceedone/exment to 4.4.3 or later.
composer require exceedone/exment:5.0.3composer require exceedone/exment:4.4.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.0.3 | - |
| 0 | 4.4.3 | - |
Fixed versions
| 5.0.3 | 4.4.3 |
Sources
- osv: GHSA-p74q-2pf8-j5jx
- https://nvd.nist.gov/vuln/detail/CVE-2022-37333
- https://exment.net/docs/#/release_note?id=v503-20220817
- https://exment.net/docs/#/weakness/20220817
- https://github.com/exceedone/exment
- https://jvn.jp/en/jp/JVN46239102/index.html
CVE-2022-37333 · published · modified · JSON