GHSA-9q34-7hfr-h8jm

Source

https://github.com/advisories/GHSA-9q34-7hfr-h8jm

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/12/GHSA-9q34-7hfr-h8jm/GHSA-9q34-7hfr-h8jm.json

JSON Data

https://api.test.osv.dev/v1/vulns/GHSA-9q34-7hfr-h8jm

Aliases

CVE-2024-54774

Published

2024-12-28T00:30:43Z

Modified

2024-12-30T17:12:12.449211Z

Severity

4.8 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

Dcat Admin Cross-site Scripting (XSS) vulnerability

Details

Dcat Admin v2.2.0-beta contains a cross-site scripting (XSS) vulnerability in /admin/articles/create.

Database specific

{
    "github_reviewed_at": "2024-12-30T16:51:36Z",
    "severity": "MODERATE",
    "nvd_published_at": "2024-12-27T22:15:12Z",
    "github_reviewed": true,
    "cwe_ids": [
        "CWE-79"
    ]
}

References

Affected packages

Packagist / dcat/laravel-admin

Package

Name: dcat/laravel-admin
Purl: pkg:composer/dcat/laravel-admin

Affected ranges

Affected versions

2.*

2.2.0-beta