Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting
概要
Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Filament is a collection of full-stack components for Laravel development. Versions of Filament from v3.0.0 through v3.2.114 are affected by a cross-site scripting (XSS) vulnerability. If values passed to a ColorColumn or ColumnEntry are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a color column or entry is rendered. Filament v3.2.115 fixes this issue.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- web github.com