Vulnerabilidades em filamentphp
10 resultadosAnálise Vexday
Filament PHP apresenta 10 vulnerabilidades catalogadas, com 6 publicadas nos últimos 90 dias, indicando ritmo de descobertas ativo. Nenhuma vulnerabilidade está sob exploração em massa (KEV) e não há críticas por CVSS, reduzindo o risco imediato. A fraqueza dominante é injeção de script (CWE-79), típica de frameworks web, exigindo atenção em validação de entrada e sanitização de outputs.
CVE-2024-51758LOWExported files stored in default (`public`) filesystem if not reconfigured in filamentEPSS 0.5%CVE-2024-47186MEDIUMFilament has unvalidated ColorColumn and ColorEntry values that can be used for Cross-site ScriptingEPSS 0.4%CVE-2026-48166MEDIUMFilament: Timing-based user enumeration on login pageEPSS 0.3%CVE-2026-48500MEDIUMFilament: Unauthenticated temporary file upload on auth pagesEPSS 0.3%CVE-2025-67507HIGHFilament's multi-factor authentication (app) recovery codes can be used multiple timesEPSS 0.3%CVE-2026-48067MEDIUMFilament: Inconsistent scope enforcement for AttachAction and AssociateAction Select fieldsEPSS 0.3%CVE-2026-48505HIGHFilament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submissionEPSS 0.3%CVE-2026-33080HIGHFilament: Unvalidated Range and Values summarizer values can be used for XSSEPSS 0.3%CVE-2026-55409HIGHFilament: Disabled RichEditor field state can be used for XSSEPSS 0.3%CVE-2026-48167MEDIUMFilament: Unvalidated ImageColumn and ImageEntry values can be used for XSSEPSS 0.2%