Junglewise Threat Intelligence

CVE-2024-47186: Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting

CVE-2024-47186 · Severity: low · CVSS 3.1 · Published 2024-09-27

Technologies: filament/tables (Packagist). Vendors: Packagist.

Executive brief

Filament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site Scripting

Affected products

  • Packagist filament/tables
  • Packagist filament/infolists