Description

Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting (XSS) vulnerability. If values passed to a `ColorColumn` or `ColumnEntry` are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a color column or entry is rendered. Filament v3.2.115 fixes this issue.

INFO

Published Date :

2024-09-27T21:04:33.587Z

Last Modified :

2024-09-27T21:56:30.280Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-47186 vulnerability.

Vendors Products
Filamentphp
  • Filament
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-47186.

URL Resource
https://github.com/filamentphp/filament/commit/df7989352464d08eda5837ef50f9997fad902316 cve-icon cve-icon
https://github.com/filamentphp/filament/releases/tag/v3.2.115 cve-icon cve-icon
https://github.com/filamentphp/filament/security/advisories/GHSA-9h9q-qhxg-89xr cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact