Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Laravel Component: Livewire Clear all filters
TI-2024-32090 CVE-2024-47823 · GHSA-f3cx-396f-7jqp

Livewire Remote Code Execution (RCE) on File Uploads

Priority HIGH 69

Livewire is a full-stack framework for Laravel that allows for dynamic UI components without leaving PHP.

CVSS 4.0HIGH 7.7 Network Low privileges No interaction EPSS 0.00846 Published 2024-10-08 Fixed in 3.5.2, 2.12.7 CWE-20
TI-2024-14261 CVE-2024-21504 · GHSA-389c-cf87-qmwj

Cross-site scripting in livewire/livewire

Priority MEDIUM 60

Versions of the package livewire/livewire from 3.3.5 and before 3.4.9 are vulnerable to Cross-site Scripting (XSS) when a page uses [Url] for a property.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00516 Published 2024-03-19 Fixed in 3.4.9 CWE-79