QwikSec

Security Database

CVE

CWE

Training

CVE-2024-47817

Published: Oct 7, 2024

Modified: Oct 8, 2024

PUBLISHED

Description

Lara-zeus Dynamic Dashboard simple way to manage widgets for your website landing page, and filament dashboard and Lara-zeus artemis is a collection of themes for the lara-zeus ecosystem. If values passed to a paragraph widget are not valid and contain a specific set of characters, applications are vulnerable to XSS attack against a user who opens a page on which a paragraph widget is rendered. Users are advised to upgrade to the appropriate fix versions detailed in the advisory metadata. There are no known workarounds for this vulnerability.

Vendor	Product	Versions
lara-zeus	dynamic-dashboard	affected `lara-zeus/dynamic-dashboard: >= 3.0.0, < 3.0.2` affected `lara-zeus/artemis: >= 1.0.0, < 1.0.7`

Weaknesses (CWE)

References

https://github.com/lara-zeus/dynamic-dashboard/security/advisories/GHSA-c6cw-g7fc-4gwc

x_refsource_CONFIRM

https://github.com/lara-zeus/artemis/commit/3a3f9dd8a706af569c5581b20dcfeff91a43b9d9

x_refsource_MISC

https://github.com/lara-zeus/dynamic-dashboard/commit/adfb4b1cdfdaa01299631f0e569ce201a7cc545a

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.