CVE-2024-39318
1 advisory.
Packagist/ibexa/admin-ui CVE-2024-39318: medium 5.4, EPSS 0.39%
Ibexa Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Action: Upgrade ibexa/admin-ui to 4.6.9 or later.
composer require ibexa/admin-ui:4.6.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.6.0-beta1 | 4.6.9 | - |
Fixed versions
| 4.6.9 |
Sources
- osv: GHSA-qm44-wjm2-pr59
- https://github.com/ezsystems/ezplatform-admin-ui/security/advisories/GHSA-gc5h-6jx9-q2qh
- https://github.com/ibexa/admin-ui/security/advisories/GHSA-qm44-wjm2-pr59
- https://nvd.nist.gov/vuln/detail/CVE-2024-39318
- https://github.com/ezsystems/ezplatform-admin-ui/commit/7a9f991b200fa5a03d49cd07f50577c8bc90a30b
- https://github.com/ibexa/admin-ui/commit/8dc413fad1045fcfbe65dbcb0bea8516accc4c3e
- https://developers.ibexa.co/security-advisories/ibexa-sa-2024-004-dom-based-xss-in-file-upload
- https://github.com/ibexa/admin-ui
CVE-2024-39318 · published · modified · JSON