Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2026-33080
Analyzed
More InfoOfficial Page
Source-security-advisories@github.com
View Known Exploited Vulnerability (KEV) details
Published At-20 Mar, 2026 | 09:16
Updated At-23 Mar, 2026 | 15:43

Filament is a collection of full-stack components for accelerated Laravel development. Versions 4.0.0 through 4.8.4 and 5.0.0 through 5.3.4 have two Filament Table summarizers (Range, Values) that render raw database values without escaping HTML. If there is a lack of validation for the data in the columns that use these summarizers, an attacker could plant malicious HTML / JavaScript and achieve stored XSS that executes for users who view the table with those summarizers. This issue has been patched in versions 4.8.5 and 5.3.5.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Date Added: N/A
Due Date: N/A
Vulnerability Name: N/A
Required Action: N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.17.3HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Primary3.15.4MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Type: Secondary
Version: 3.1
Base score: 7.3
Base severity: HIGH
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
Type: Primary
Version: 3.1
Base score: 5.4
Base severity: MEDIUM
Vector:
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
CPE Matches

filamentphp
filamentphp
>>filament>>Versions from 4.0.0(inclusive) to 4.8.5(exclusive)
cpe:2.3:a:filamentphp:filament:*:*:*:*:*:*:*:*
filamentphp
filamentphp
>>filament>>Versions from 5.0.0(inclusive) to 5.3.5(exclusive)
cpe:2.3:a:filamentphp:filament:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-79Primarysecurity-advisories@github.com
CWE-80Primarysecurity-advisories@github.com
CWE ID: CWE-79
Type: Primary
Source: security-advisories@github.com
CWE ID: CWE-80
Type: Primary
Source: security-advisories@github.com
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://github.com/filamentphp/filament/commit/efa041aeeb4b1a99acd48aaa05584993c926d1edsecurity-advisories@github.com
Patch
https://github.com/filamentphp/filament/releases/tag/v4.8.5security-advisories@github.com
Product
Release Notes
https://github.com/filamentphp/filament/releases/tag/v5.3.5security-advisories@github.com
Product
Release Notes
https://github.com/filamentphp/filament/security/advisories/GHSA-vv3x-j2x5-36jcsecurity-advisories@github.com
Vendor Advisory
Hyperlink: https://github.com/filamentphp/filament/commit/efa041aeeb4b1a99acd48aaa05584993c926d1ed
Source: security-advisories@github.com
Resource:
Patch
Hyperlink: https://github.com/filamentphp/filament/releases/tag/v4.8.5
Source: security-advisories@github.com
Resource:
Product
Release Notes
Hyperlink: https://github.com/filamentphp/filament/releases/tag/v5.3.5
Source: security-advisories@github.com
Resource:
Product
Release Notes
Hyperlink: https://github.com/filamentphp/filament/security/advisories/GHSA-vv3x-j2x5-36jc
Source: security-advisories@github.com
Resource:
Vendor Advisory
Change History
0Changes found

Details not found