{"action":"Upgrade lara-zeus/artemis to 1.0.7 or later.","affected":[{"fixed":"1.0.7","introduced":"1.0.0"}],"component":"lara-zeus/artemis","cve_ids":["CVE-2024-47817"],"ecosystem":"Packagist","epss":0.00395,"exploited":false,"fixed_versions":["1.0.7"],"ghsa_id":"GHSA-c6cw-g7fc-4gwc","id":"tcs_01M5KF0NQ2E4X1QNH66W2XFXQD","modified_at":"2024-10-08T14:37:25.754713Z","published_at":"2024-10-07T14:55:30Z","references":["https://osv.dev/vulnerability/GHSA-c6cw-g7fc-4gwc","https://github.com/lara-zeus/dynamic-dashboard/security/advisories/GHSA-c6cw-g7fc-4gwc","https://nvd.nist.gov/vuln/detail/CVE-2024-47817","https://github.com/lara-zeus/artemis/commit/3a3f9dd8a706af569c5581b20dcfeff91a43b9d9","https://github.com/lara-zeus/artemis/commit/4636f58628d20d3e78ea8514406bd7da94997f2c","https://github.com/lara-zeus/dynamic-dashboard/commit/adfb4b1cdfdaa01299631f0e569ce201a7cc545a","https://github.com/lara-zeus/dynamic-dashboard"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-c6cw-g7fc-4gwc#Packagist/lara-zeus/artemis","url":"https://osv.dev/vulnerability/GHSA-c6cw-g7fc-4gwc"}],"summary":"Lara-zeus Dynamic Dashboard and Artemis do not validate paragraph widget values which can be used for XSS"}