filament/filament vulnerabilities (Packagist)
8 vulnerabilities.
filament/filamentPackagistFilament: Multi-factor authentication (app) management actions do not require password reauthentication5.4 Mediumfilament/filamentPackagistFilament: Password validity disclosure for accounts denied panel access on login page3.7 Lowfilament/filamentPackagistFilament: Multi-factor authentication (app) codes can still be used after a newer code has been used6.5 Mediumfilament/filamentPackagistFilament: App-based MFA can be bypassed when recovery codes are enabled8.1 Highfilament/filamentPackagistFilament: Unauthenticated temporary file upload on auth pages6.5 Mediumfilament/filamentPackagistFilament: Timing-based user enumeration on login page5.3 Mediumfilament/filamentPackagistFilament: Multi-factor authentication (app) recovery codes can still be used multiple times via concurrent submission7.4 Highfilament/filamentPackagistFilament's multi-factor authentication (app) recovery codes can be used multiple times8.1 High